CVE:CVE-2018-6974
CNNVD:CNNVD-201810-748
VMware ESXi、Workstation和Fusion都是美国威睿（VMware）公司的产品。VMware ESXi是一套可直接安装在物理服务器上的服务器虚拟化平台；VMware Workstation是一套虚拟机软件；Fusion是一套专用于在苹果机（Mac）上运行Windows应用程序的的虚拟机软件。 
VMware ESXi、Workstation和Fusion中存在越界读取漏洞。攻击者可利用该漏洞在主机上执行代码。以下产品和版本受到影响：VMware ESXi ESXi670-201810101-SG之前的6.7版本，ESXi650-201808401-BG之前的6.5版本，ESXi600-201808401-BG之前的6.0版本；Workstation 14.1.3之前的14.x版本；Fusion 10.1.3之前的10.x版本。
solution:Upgrade vmware workstation to a higher version than 14.1.3,and avoid the version [14.0,14.1.3); Upgrade vmware fusion to a higher version than 10.1.3,and avoid the version [10.0,10.1.3); Upgrade vmware esxi to a higher version than 6.0,6.0:1,6.0:1a,6.0:1b,6.0:2,6.0:3,6.0:3a,6.0:600-201504401,6.0:600-201505401,6.0:600-201507101,6.0:600-201507102,6.0:600-201507401,6.0:600-201507402,6.0:600-201507403,6.0:600-201507404,6.0:600-201507405,6.0:600-201507406,6.0:600-201507407,6.0:600-201509101,6.0:600-201509102,6.0:600-201509201,6.0:600-201509202,6.0:600-201509203,6.0:600-201509204,6.0:600-201509205,6.0:600-201509206,6.0:600-201509207,6.0:600-201509208,6.0:600-201509209,6.0:600-201509210,6.0:600-201510401,6.0:600-201511401,6.0:600-201601101,6.0:600-201601102,6.0:600-201601401,6.0:600-201601402,6.0:600-201601403,6.0:600-201601404,6.0:600-201601405,6.0:600-201602401,6.0:600-201603101,6.0:600-201603102,6.0:600-201603201,6.0:600-201603202,6.0:600-201603203,6.0:600-201603204,6.0:600-201603205,6.0:600-201603206,6.0:600-201603207,6.0:600-201603208,6.0:600-201605401,6.0:600-201608101,6.0:600-201608401,6.0:600-201608402,6.0:600-201608403,6.0:600-201608404,6.0:600-201608405,6.0:600-201610410,6.0:600-201611401,6.0:600-201611402,6.0:600-201611403,6.0:600-201702101,6.0:600-201702102,6.0:600-201702201,6.0:600-201702202,6.0:600-201702203,6.0:600-201702204,6.0:600-201702205,6.0:600-201702206,6.0:600-201702207,6.0:600-201702208,6.0:600-201702209,6.0:600-201702210,6.0:600-201702211,6.0:600-201702212,6.0:600-201703401,6.0:600-201706101,6.0:600-201706102,6.0:600-201706103,6.0:600-201706401,6.0:600-201706402,6.0:600-201706403,6.0:600-201710301,6.5,6.5:2,6.5:650-201701001,6.5:650-201703001,6.5:650-201703002,6.5:650-201704001,6.5:650-201707101,6.5:650-201707102,6.5:650-201707103,6.5:650-201707201,6.5:650-201707202,6.5:650-201707203,6.5:650-201707204,6.5:650-201707205,6.5:650-201707206,6.5:650-201707207,6.5:650-201707208,6.5:650-201707209,6.5:650-201707210,6.5:650-201707211,6.5:650-201707212,6.5:650-201707213,6.5:650-201707214,6.5:650-201707215,6.5:650-201707216,6.5:650-201707217,6.5:650-201707218,6.5:650-201707219,6.5:650-201707220,6.5:650-201707221,6.5:650-201710001,6.5:650-201712001,6.5:650-201803001,6.5:650-201806001,6.5:650-201808001,6.7,6.7:670-201806001,6.7:670-201807001,6.7:670-201808001,6.7:670-201810001,and avoid the version 6.0,6.0:1,6.0:1a,6.0:1b,6.0:2,6.0:3,6.0:3a,6.0:600-201504401,6.0:600-201505401,6.0:600-201507101,6.0:600-201507102,6.0:600-201507401,6.0:600-201507402,6.0:600-201507403,6.0:600-201507404,6.0:600-201507405,6.0:600-201507406,6.0:600-201507407,6.0:600-201509101,6.0:600-201509102,6.0:600-201509201,6.0:600-201509202,6.0:600-201509203,6.0:600-201509204,6.0:600-201509205,6.0:600-201509206,6.0:600-201509207,6.0:600-201509208,6.0:600-201509209,6.0:600-201509210,6.0:600-201510401,6.0:600-201511401,6.0:600-201601101,6.0:600-201601102,6.0:600-201601401,6.0:600-201601402,6.0:600-201601403,6.0:600-201601404,6.0:600-201601405,6.0:600-201602401,6.0:600-201603101,6.0:600-201603102,6.0:600-201603201,6.0:600-201603202,6.0:600-201603203,6.0:600-201603204,6.0:600-201603205,6.0:600-201603206,6.0:600-201603207,6.0:600-201603208,6.0:600-201605401,6.0:600-201608101,6.0:600-201608401,6.0:600-201608402,6.0:600-201608403,6.0:600-201608404,6.0:600-201608405,6.0:600-201610410,6.0:600-201611401,6.0:600-201611402,6.0:600-201611403,6.0:600-201702101,6.0:600-201702102,6.0:600-201702201,6.0:600-201702202,6.0:600-201702203,6.0:600-201702204,6.0:600-201702205,6.0:600-201702206,6.0:600-201702207,6.0:600-201702208,6.0:600-201702209,6.0:600-201702210,6.0:600-201702211,6.0:600-201702212,6.0:600-201703401,6.0:600-201706101,6.0:600-201706102,6.0:600-201706103,6.0:600-201706401,6.0:600-201706402,6.0:600-201706403,6.0:600-201710301,6.5,6.5:2,6.5:650-201701001,6.5:650-201703001,6.5:650-201703002,6.5:650-201704001,6.5:650-201707101,6.5:650-201707102,6.5:650-201707103,6.5:650-201707201,6.5:650-201707202,6.5:650-201707203,6.5:650-201707204,6.5:650-201707205,6.5:650-201707206,6.5:650-201707207,6.5:650-201707208,6.5:650-201707209,6.5:650-201707210,6.5:650-201707211,6.5:650-201707212,6.5:650-201707213,6.5:650-201707214,6.5:650-201707215,6.5:650-201707216,6.5:650-201707217,6.5:650-201707218,6.5:650-201707219,6.5:650-201707220,6.5:650-201707221,6.5:650-201710001,6.5:650-201712001,6.5:650-201803001,6.5:650-201806001,6.5:650-201808001,6.7,6.7:670-201806001,6.7:670-201807001,6.7:670-201808001,6.7:670-201810001