CVE:CVE-2010-4294
CNNVD:CNNVD-201012-064
VMware是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。
VMware Movie Decoder的VMnc codec组件在实现上存在内存破坏漏洞，在将用户提供的数据复制到过程缓冲区之前，未在解码器报文解压中执行边界验证过滤，造成堆内存破坏。攻击者可利用此漏洞在应用程序中执行任意代码及拒绝服务攻击。
solution:Upgrade vmware movie_decoder to a higher version than 6.5.5,6.5.3,6.5.4,7.0,7.1.2,and avoid the version (,6.5.5],6.5.3,6.5.4,7.0,7.1.2; Upgrade vmware workstation to a higher version than 6.5.0,6.5.1,6.5.2,6.5.3,6.5.4,6.5.5,7.0,7.0.1,7.1,7.1.1,7.1.2,and avoid the version 6.5.0,6.5.1,6.5.2,6.5.3,6.5.4,6.5.5,7.0,7.0.1,7.1,7.1.1,7.1.2; Upgrade vmware player to a higher version than 2.5,2.5.1,2.5.2,2.5.3,2.5.4,2.5.5,3.0,3.0.1,3.1,3.1.1,3.1.2,and avoid the version 2.5,2.5.1,2.5.2,2.5.3,2.5.4,2.5.5,3.0,3.0.1,3.1,3.1.1,3.1.2; Upgrade vmware server to a higher version than 2.0.0,2.0.1,2.0.2,and avoid the version 2.0.0,2.0.1,2.0.2