CVE:CVE-2008-3698
CNNVD:CNNVD-200809-032
VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。
windows 平台上的VMware Workstation 5.5.x　5.5.8build 108000以前版本 , VMware Workstation 6.0.x  6.0.5 build 109488以前版本, VMware Player 1.x 1.0.8 build 108000以前版本, VMware Player 2.x  2.0.5 build 109488以前版本, VMware ACE 1.x 1.0.7 build 108880以前版本, VMware ACE 2.x  2.0.5 build 109488以前版本, 和 VMware Server  1.0.7 build 108231以前版本 的OpenProcess函数允许本地host用户通过未知向量获取host主机的OS权限。
solution:Upgrade vmware ace to a higher version than 1.0.7,2.0.5,and avoid the version [1.0,1.0.7),[2.0,2.0.5); Upgrade vmware player to a higher version than 1.0.8,2.0.5,and avoid the version [1.0.0,1.0.8),[2.0,2.0.5); Upgrade vmware server to a higher version than 1.0.7,and avoid the version (,1.0.7); Upgrade vmware workstation to a higher version than 5.5.8,6.0.5,and avoid the version [5.5,5.5.8),[6.0,6.0.5)