CVE:CVE-2008-3892
CNNVD:CNNVD-200809-036
VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。
VMware Workstation 5.5.x 5.5.8 build 108000以前版本, VMware Workstation 6.0.x 6.0.5 build 109488以前版本, VMware Player 1.x 1.0.8 build 108000以前版本, VMware Player 2.x  2.0.5 build 109488以前版本, VMware ACE 1.x  1.0.7 build 108880以前版本, VMware ACE 2.x  2.0.5 build 109488以前版本和 VMware Server  1.0.7 build 108231以前版本 的 COM API 中的的ActiveX组件存在缓冲区溢出漏洞，允许攻击者通过GuestInfo方法的调用来引发拒绝服务攻击或者执行任意代码。
solution:Upgrade vmware ace to a higher version than 1.0.7,2.0.5,and avoid the version [1.0,1.0.7),[2.0,2.0.5); Upgrade vmware player to a higher version than 1.0.8,2.0.5,and avoid the version [1.0.0,1.0.8),[2.0,2.0.5); Upgrade vmware server to a higher version than 1.0.7,and avoid the version (,1.0.7); Upgrade vmware workstation to a higher version than 5.5.8,6.0.5,and avoid the version [5.5,5.5.8),[6.0,6.0.5)