CVE:CVE-2009-2628
CNNVD:CNNVD-200909-129
VMware Movie Decoder是用于在VMware虚拟机中通过媒体播放器播放电影的工具。
VMware电影解码器包含有用于播放电影的VMnc编码解码器(vmnc.dll)中存在堆溢出漏洞。如果用户受骗打开了包含有错误framebuffer参数的特制视频文件的话，就可以触发这个溢出，导致执行任意指令。
solution:Upgrade vmware ace to a higher version than 2.5.0,2.5.1,2.5.2,and avoid the version 2.5.0,2.5.1,2.5.2; Upgrade vmware movie_decoder to a higher version than 6.5.3,and avoid the version 6.5.3; Upgrade vmware player to a higher version than 2.5,2.5.1,2.5.2,and avoid the version 2.5,2.5.1,2.5.2; Upgrade vmware workstation to a higher version than 6.5,6.5.0,6.5.1,6.5.2,and avoid the version 6.5,6.5.0,6.5.1,6.5.2