CVE:CVE-2012-3569
CNNVD:CNNVD-201211-189
VMware OVF Tool是命令行程序，可允许从多种VMware产品导入和导出OVF软件包。
使用在VMware Workstation 8.0.5之前的8.x版本、VMware Player 4.0.5之前的4.x版本以及其他产品中基于Windows系统的的VMware OVF Tool 2.1版本中存在格式字符串漏洞。用户协助的远程攻击者利用该漏洞通过特制的OVF文件执行任意代码。
solution:Upgrade vmware ovf_tool to a higher version than 2.1,and avoid the version 2.1; Upgrade vmware workstation to a higher version than 8.0,8.0.0.18997,8.0.1,8.0.1.27038,8.0.2,8.0.3,8.0.4,and avoid the version 8.0,8.0.0.18997,8.0.1,8.0.1.27038,8.0.2,8.0.3,8.0.4; Upgrade vmware player to a higher version than 4.0,4.0.0.18997,4.0.1,4.0.2,4.0.3,4.0.4,and avoid the version 4.0,4.0.0.18997,4.0.1,4.0.2,4.0.3,4.0.4