CVE:CVE-2017-4902
CNNVD:CNNVD-201703-1256
VMware ESXi等都是美国威睿（VMware）公司的产品。VMware ESXi是一套可直接安装在物理服务器上的服务器虚拟化平台；VMware Workstation Pro、VMware Workstation Player、VMware Fusion都是虚拟机软件。SVGA是其中的一个视频图形适配器。
多款VMware产品中的SVGA存在堆缓冲区溢出漏洞。攻击者可利用该漏洞在主机上执行代码。以下产品和版本受到影响：VMware ESXi 6.5版本，5.5版本；Workstation Pro / Player 12.5.5之前的12.x版本；Fusion Pro / Fusion 8.5.6之前的8.x版本。
solution:Upgrade vmware workstation_player to a higher version than 12.5.5,and avoid the version [12.0.0,12.5.5); Upgrade vmware workstation_pro to a higher version than 12.5.5,and avoid the version [12.0.0,12.5.5); Upgrade vmware esxi to a higher version than 5.5,5.5:1,5.5:2,5.5:3a,5.5:3b,6.5,6.5:650-201701001,6.5:650-201703001,6.5:650-201703002,and avoid the version 5.5,5.5:1,5.5:2,5.5:3a,5.5:3b,6.5,6.5:650-201701001,6.5:650-201703001,6.5:650-201703002; Upgrade vmware fusion to a higher version than 8.5.6,and avoid the version [8.0.0,8.5.6); Upgrade vmware fusion_pro to a higher version than 8.5.6,and avoid the version [8.0.0,8.5.6)