CVE:CVE-2009-1565
CNNVD:CNNVD-201004-154
VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。
Windows平台上VMnc媒体编解码器，VMware工作站，VMware播放器，Vmware服务器的vmnc.dll远程攻击者利用制作的HexTile编码视频块通过AVI文件执行任意代码，触发基于堆的缓冲区溢出（堆溢出），与‘整数截断误差’相关。
solution:Upgrade vmware movie_decoder to a higher version than 6.5.3,and avoid the version 6.5.3; Upgrade vmware workstation to a higher version than 6.5.0,6.5.1,6.5.2,6.5.3,and avoid the version 6.5.0,6.5.1,6.5.2,6.5.3; Upgrade vmware player to a higher version than 2.5,2.5.1,2.5.2,2.5.3,and avoid the version 2.5,2.5.1,2.5.2,2.5.3; Upgrade vmware server to a higher version than 2.0.0,2.0.1,2.0.2,and avoid the version 2.0.0,2.0.1,2.0.2