CVE:CVE-2017-4933
CNNVD:CNNVD-201712-748
VMware ESXi、Workstation和Fusion都是美国威睿（VMware）公司的产品。VMware ESXi是一套可直接安装在物理服务器上的服务器虚拟化平台；VMware Workstation是一套虚拟机软件；Fusion是一套专用于在苹果机（Mac）上运行Windows应用程序的的虚拟机软件。 
Vmware ESXi、Workstation和Fusion中存在堆溢出漏洞。远程攻击者可借助特制的VNC数据包利用该漏洞在虚拟设备上执行任意代码。以下产品和版本受到影响：VMware ESXi ESXi650-201710401-BG之前的6.5版本；Workstation 12.5.8之前的12.x版本；Fusion 8.5.9之前的8.x版本。
solution:Upgrade vmware workstation_pro to a higher version than 12.5.8,14.0,14.1.0,and avoid the version [12.0.0,12.5.8),14.0,14.1.0; Upgrade vmware esxi to a higher version than 6.5,6.5:650-201701001,6.5:650-201703001,6.5:650-201703002,6.5:650-201704001,6.5:650-201707101,6.5:650-201707102,6.5:650-201707103,6.5:650-201707201,6.5:650-201707202,6.5:650-201707203,6.5:650-201707204,6.5:650-201707205,6.5:650-201707206,6.5:650-201707207,6.5:650-201707208,6.5:650-201707209,6.5:650-201707210,6.5:650-201707211,6.5:650-201707212,6.5:650-201707213,6.5:650-201707214,6.5:650-201707215,6.5:650-201707216,6.5:650-201707217,6.5:650-201707218,6.5:650-201707219,6.5:650-201707220,6.5:650-201707221,6.5:650-201710001,and avoid the version 6.5,6.5:650-201701001,6.5:650-201703001,6.5:650-201703002,6.5:650-201704001,6.5:650-201707101,6.5:650-201707102,6.5:650-201707103,6.5:650-201707201,6.5:650-201707202,6.5:650-201707203,6.5:650-201707204,6.5:650-201707205,6.5:650-201707206,6.5:650-201707207,6.5:650-201707208,6.5:650-201707209,6.5:650-201707210,6.5:650-201707211,6.5:650-201707212,6.5:650-201707213,6.5:650-201707214,6.5:650-201707215,6.5:650-201707216,6.5:650-201707217,6.5:650-201707218,6.5:650-201707219,6.5:650-201707220,6.5:650-201707221,6.5:650-201710001; Upgrade vmware fusion to a higher version than 8.5.9,and avoid the version [8.0.0,8.5.9)