CVE:CVE-2010-1138
CNNVD:CNNVD-201004-157
VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。
Vmware工作站、Vmware播放器、Vmware ACE、 Vmware服务器以及Vmware Fusion的虚拟网络堆栈远程攻击者通过查看收到的网络包从主机操作系统内存中获取敏感信息。与子操作系统和主操作系统的vmware-vmx进程交互相关。
solution:Upgrade vmware workstation to a higher version than 7.0,6.5.0,6.5.1,6.5.2,6.5.3,and avoid the version 7.0,6.5.0,6.5.1,6.5.2,6.5.3; Upgrade vmware player to a higher version than 3.0,2.5,2.5.1,2.5.2,2.5.3,and avoid the version 3.0,2.5,2.5.1,2.5.2,2.5.3; Upgrade vmware ace to a higher version than 2.5.0,2.5.1,2.5.2,2.5.3,2.6,and avoid the version 2.5.0,2.5.1,2.5.2,2.5.3,2.6; Upgrade vmware server to a higher version than 2.0.0,2.0.1,2.0.2,and avoid the version 2.0.0,2.0.1,2.0.2; Upgrade vmware fusion to a higher version than 2.0,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0.6,3.0,and avoid the version 2.0,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0.6,3.0