CVE:CVE-2017-4903
CNNVD:CNNVD-201703-1259
VMware Workstation Pro等都是美国威睿（VMware）公司的虚拟机软件产品。VMware Workstation Pro是其中的一个专业版；VMware Workstation Player是一套免费开源的且功能较简单的虚拟机软件。
多款VMware产品中存在安全漏洞。本地攻击者可利用该漏洞在主机上执行代码。以下产品和版本受到影响：VMware ESXi 6.5版本，6.0 U3版本，6.0 U2版本，6.0 U1版本，6.0版本，5.5版本；Workstation Pro / Player 12.5.5之前的12.x版本；Fusion Pro / Fusion 8.5.6之前的8.x版本。
solution:Upgrade vmware workstation_player to a higher version than 12.5.5,and avoid the version [12.0.0,12.5.5); Upgrade vmware workstation_pro to a higher version than 12.5.5,and avoid the version [12.0.0,12.5.5); Upgrade vmware esxi to a higher version than 5.5,5.5:1,5.5:2,5.5:3a,5.5:3b,6.0,6.0:1,6.0:1a,6.0:1b,6.0:2,6.0:3,6.0:3a,6.0:600-201504401,6.0:600-201505401,6.0:600-201507101,6.0:600-201507102,6.0:600-201507401,6.0:600-201507402,6.0:600-201507403,6.0:600-201507404,6.0:600-201507405,6.0:600-201507406,6.0:600-201507407,6.0:600-201509101,6.0:600-201509102,6.0:600-201509201,6.0:600-201509202,6.0:600-201509203,6.0:600-201509204,6.0:600-201509205,6.0:600-201509206,6.0:600-201509207,6.0:600-201509208,6.0:600-201509209,6.0:600-201509210,6.0:600-201510401,6.0:600-201511401,6.0:600-201601101,6.0:600-201601102,6.0:600-201601401,6.0:600-201601402,6.0:600-201601403,6.0:600-201601404,6.0:600-201601405,6.0:600-201602401,6.0:600-201603101,6.0:600-201603102,6.0:600-201603201,6.0:600-201603202,6.0:600-201603203,6.0:600-201603204,6.0:600-201603205,6.0:600-201603206,6.0:600-201603207,6.0:600-201603208,6.0:600-201605401,6.0:600-201608101,6.0:600-201608401,6.0:600-201608402,6.0:600-201608403,6.0:600-201608404,6.0:600-201608405,6.0:600-201610410,6.0:600-201611401,6.0:600-201611402,6.0:600-201611403,6.0:600-201702101,6.0:600-201702102,6.0:600-201702201,6.0:600-201702202,6.0:600-201702203,6.0:600-201702204,6.0:600-201702205,6.0:600-201702206,6.0:600-201702207,6.0:600-201702208,6.0:600-201702209,6.0:600-201702210,6.0:600-201702211,6.0:600-201702212,6.5,6.5:650-201701001,6.5:650-201703001,6.5:650-201703002,and avoid the version 5.5,5.5:1,5.5:2,5.5:3a,5.5:3b,6.0,6.0:1,6.0:1a,6.0:1b,6.0:2,6.0:3,6.0:3a,6.0:600-201504401,6.0:600-201505401,6.0:600-201507101,6.0:600-201507102,6.0:600-201507401,6.0:600-201507402,6.0:600-201507403,6.0:600-201507404,6.0:600-201507405,6.0:600-201507406,6.0:600-201507407,6.0:600-201509101,6.0:600-201509102,6.0:600-201509201,6.0:600-201509202,6.0:600-201509203,6.0:600-201509204,6.0:600-201509205,6.0:600-201509206,6.0:600-201509207,6.0:600-201509208,6.0:600-201509209,6.0:600-201509210,6.0:600-201510401,6.0:600-201511401,6.0:600-201601101,6.0:600-201601102,6.0:600-201601401,6.0:600-201601402,6.0:600-201601403,6.0:600-201601404,6.0:600-201601405,6.0:600-201602401,6.0:600-201603101,6.0:600-201603102,6.0:600-201603201,6.0:600-201603202,6.0:600-201603203,6.0:600-201603204,6.0:600-201603205,6.0:600-201603206,6.0:600-201603207,6.0:600-201603208,6.0:600-201605401,6.0:600-201608101,6.0:600-201608401,6.0:600-201608402,6.0:600-201608403,6.0:600-201608404,6.0:600-201608405,6.0:600-201610410,6.0:600-201611401,6.0:600-201611402,6.0:600-201611403,6.0:600-201702101,6.0:600-201702102,6.0:600-201702201,6.0:600-201702202,6.0:600-201702203,6.0:600-201702204,6.0:600-201702205,6.0:600-201702206,6.0:600-201702207,6.0:600-201702208,6.0:600-201702209,6.0:600-201702210,6.0:600-201702211,6.0:600-201702212,6.5,6.5:650-201701001,6.5:650-201703001,6.5:650-201703002; Upgrade vmware fusion to a higher version than 8.5.6,and avoid the version [8.0.0,8.5.6); Upgrade vmware fusion_pro to a higher version than 8.5.6,and avoid the version [8.0.0,8.5.6)