CVE:CVE-2009-1147
CNNVD:CNNVD-200904-108
VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。
VMWare Workstation(6.5.1及早期版本) VMware Player(2.5.1及早期版本), VMware ACE(2.5.1及早期版本), 和VMware Server(2.0.1早期版本) Virtual Machine Communication Interface界面'vmci.sys' 存在未明权限提升安全漏洞，本地用户通过未明向量可以获得其它权限。
solution:Upgrade vmware ace to a higher version than *,1.0,1.0.0,1.0.1,1.0.2,1.0.3,1.0.3_build_54075,1.0.4,1.0.5,1.0.6,1.0.7,2.0,2.0.1,2.0.1_build_55017,2.0.2,2.0.3,2.0.4,2.0.5,2.5.0,2.5.1,and avoid the version 1.0,1.0.0,1.0.1,1.0.2,1.0.3,1.0.3_build_54075,1.0.4,1.0.5,1.0.6,1.0.7,2.0,2.0.1,2.0.1_build_55017,2.0.2,2.0.3,2.0.4,2.0.5,2.5.0,2.5.1; Upgrade vmware workstation to a higher version than 1.0.1,1.0.2,1.0.4,1.0.5,1.1,1.1.1,1.1.2,2.0,2.0.1,3.2.1:patch1,3.4,4.0,4.0.1,4.0.1_build_5289,4.0.2,4.5.2,4.5.2_build_8848,4.5.2_build_8848:r4,5,5.0.0_build_13124,5.5,5.5.0_build_13124,5.5.1,5.5.1_build_19175,5.5.2,5.5.3,5.5.3:42958,5.5.3_build_34685,5.5.3_build_42958,5.5.4,5.5.4_build_44386,5.5.5,5.5.5_build_56455,5.5.6,5.5.7,5.5.8,6.0,6.0.1,6.0.1_build_55017,6.0.2,6.0.3,6.0.4,6.0.5,6.5,6.5.1,and avoid the version 1.0.1,1.0.2,1.0.4,1.0.5,1.1,1.1.1,1.1.2,2.0,2.0.1,3.2.1:patch1,3.4,4.0,4.0.1,4.0.1_build_5289,4.0.2,4.5.2,4.5.2_build_8848,4.5.2_build_8848:r4,5,5.0.0_build_13124,5.5,5.5.0_build_13124,5.5.1,5.5.1_build_19175,5.5.2,5.5.3,5.5.3:42958,5.5.3_build_34685,5.5.3_build_42958,5.5.4,5.5.4_build_44386,5.5.5,5.5.5_build_56455,5.5.6,5.5.7,5.5.8,6.0,6.0.1,6.0.1_build_55017,6.0.2,6.0.3,6.0.4,6.0.5,6.5,6.5.1; Upgrade vmware player to a higher version than 1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,2.0,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.5,2.5.1,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,2.0,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.5,2.5.1; Upgrade vmware server to a higher version than 2.0,and avoid the version 2.0