CVE:CVE-2008-2100
CNNVD:CNNVD-200806-091
VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。
多款VMware产品中的VIX API 1.1.4 build 93057之前的1.1.x版本存在缓冲区错误漏洞，攻击者可利用该漏洞执行任意代码。以下产品及版本受到影响：VMware Workstation 5.x版本，6.x版本；VMware Player 1.x版本，2.x版本；VMware ACE 2.x版本；VMware Server 1.x版本；VMware Fusion 1.x版本；VMware ESXi 3.5版本；VMware ESX 3.0.1版本至3.5版本。
solution:Upgrade vmware ace to a higher version than 1.0.5,2.0.3,and avoid the version [1.0,1.0.5],[2.0,2.0.3]; Upgrade vmware esx_server to a higher version than 3.0,3.5,and avoid the version 3.0,3.5; Upgrade vmware esxi to a higher version than 3.5,and avoid the version 3.5; Upgrade vmware fusion to a higher version than 1.1.1,and avoid the version (,1.1.1]; Upgrade vmware player to a higher version than 1.0.6,2.0.3,and avoid the version [1.0.0,1.0.6],[2.0,2.0.3]; Upgrade vmware server to a higher version than 1.0.5,and avoid the version (,1.0.5]; Upgrade vmware workstation to a higher version than 5.5.6,6.0.3,and avoid the version [5.5,5.5.6],[6.0,6.0.3]; Upgrade vmware esx to a higher version than 2.5.4,2.5.5,3.0.0,3.0.1,3.0.2,3.5,and avoid the version 2.5.4,2.5.5,3.0.0,3.0.1,3.0.2,3.5