CVE:CVE-2010-1139
CNNVD:CNNVD-201004-158
VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。
VMware VIX API, Vmware工作站，Vmware播放器 ，Linux下Vmware服务器 和VMware Fusion 中的vmrun存在格式化字符串漏洞。本地用户在进程元数据中通过格式化字符串限定符获取权限。
solution:Upgrade vmware workstation to a higher version than 6.5.0,6.5.1,6.5.2,6.5.3,and avoid the version 6.5.0,6.5.1,6.5.2,6.5.3; Upgrade vmware player to a higher version than 2.5,2.5.1,2.5.2,2.5.3,and avoid the version 2.5,2.5.1,2.5.2,2.5.3; Upgrade vmware server to a higher version than 2.0.0,2.0.1,2.0.2,and avoid the version 2.0.0,2.0.1,2.0.2; Upgrade vmware fusion to a higher version than 2.0,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0.6,and avoid the version 2.0,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0.6; Upgrade vmware vix_api to a higher version than 1.6.0,1.6.1,and avoid the version 1.6.0,1.6.1