CVE:CVE-2007-5023
CNNVD:CNNVD-200709-308
VMware Workstation和VMware Workstation Player都是美国威睿（VMware）公司的产品。VMware Workstation是一套虚拟机软件。该软件提供可以同时运行多个不同的操作系统的虚拟机功能。VMware Workstation Player是一套免费开源的且功能较简单的虚拟机软件。
VMware Workstation 5.5.5 Build 56455之前版本和6.0.1 Build 55017之前的6.x版本，Player 1.0.5 Build 56455之前版本以及Player 2 2.0.1 Build 55017之前版本, ACE 1.0.3 Build 54075之前版本，Server 1.0.4 Build 56528之前版本存在未公开(Unquoted Windows)搜寻路径漏洞，使得本地用户通过不明向量获得权限，这可能放入一个恶意的"program.exe"文件到C:文件夹中。
solution:Upgrade vmware ace to a higher version than 1.0.3,and avoid the version [1.0,1.0.3]; Upgrade vmware player to a higher version than 1.0.5,2.0.1,and avoid the version [1.0.0,1.0.5],[2.0,2.0.1]; Upgrade vmware server to a higher version than 1.0.4,and avoid the version [1.0,1.0.4]; Upgrade vmware workstation to a higher version than 5.5.5,6.0.1,and avoid the version [5,5.5.5],[6.0,6.0.1]; Upgrade canonical ubuntu_linux to a higher version than 6.06,6.10,7.04,and avoid the version 6.06,6.10,7.04