CVE:CVE-2007-5438
CNNVD:CNNVD-200710-231
VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。
VMWare所提供的Reconfig.DLL库(ConnectPopulatedDiskEx函数)中存在安全漏洞，本地攻击者可能利用此漏洞导致拒绝服务。
如果用户受骗加载了恶意的磁盘镜像的话，就会导致VMWare的虚拟磁盘加载服务(vmount2.exe)拒绝服务。
solution:Upgrade vmware ace to a higher version than 1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,2.0,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,and avoid the version 1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,2.0,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5; Upgrade vmware vmware_player to a higher version than 1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,2.0,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,2.0,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5; Upgrade vmware vmware_server to a higher version than 1.0.7,1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,and avoid the version (,1.0.7],1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6; Upgrade vmware vmware_workstation to a higher version than 5.5.0,5.5.1,5.5.2,5.5.3,5.5.4,5.5.5,5.5.6,5.5.7,5.5.8,6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,and avoid the version 5.5.0,5.5.1,5.5.2,5.5.3,5.5.4,5.5.5,5.5.6,5.5.7,5.5.8,6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5