CVE:CVE-2011-2145
CNNVD:CNNVD-201106-037
VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。
当Solaris或者FreeBSD客户操作系统使用时，VMware Host Guest File System (HGFS)中的mount.vmhgfs中存在权限许可和访问控制漏洞。客户操作系统用户可以借助未明向量修改任意客户操作系统文件。
该漏洞位于VMware Workstation 7.1.4之前的7.1.x版本，VMware Player 3.1.4之前的3.1.x版本，VMware Fusion 3.1.3之前的3.1.x版本，VMware ESXi 3.5至4.1版本，以及VMware ESX 3.0.3至4.1版本中。
solution:Upgrade vmware esx to a higher version than 3.0.3,3.5,4.0,4.1,and avoid the version 3.0.3,3.5,4.0,4.1; Upgrade vmware esxi to a higher version than 3.5,4.0,4.1,and avoid the version 3.5,4.0,4.1; Upgrade vmware fusion to a higher version than 3.1,3.1.1,3.1.2,and avoid the version 3.1,3.1.1,3.1.2; Upgrade vmware player to a higher version than 3.1,3.1.1,3.1.2,3.1.3,and avoid the version 3.1,3.1.1,3.1.2,3.1.3; Upgrade vmware workstation to a higher version than 7.1.1,7.1.2,7.1.3,and avoid the version 7.1.1,7.1.2,7.1.3