发布日期：2009-11-20
更新日期：2012-01-12

受影响系统：

VMWare ESX Server
VMWare vCenter
VMWare vMA

描述：

---

CVE ID: CVE-2009-1093,CVE-2009-1094,CVE-2009-1095,                    CVE-2009-1096,CVE-2009-1097,CVE-2009-1098,                    CVE-2009-1099,CVE-2009-1100,CVE-2009-1101,                    CVE-2009-1102,CVE-2009-1103,CVE-2009-1104,                    CVE-2009-1105,CVE-2009-1106,CVE-2009-1107,                    CVE-2009-2625,CVE-2009-2670,CVE-2009-2671,                    CVE-2009-2672,CVE-2009-2673,CVE-2009-2675,                    CVE-2009-2676,CVE-2009-2716,CVE-2009-2718,                    CVE-2009-2719,CVE-2009-2720,CVE-2009-2721,                    CVE-2009-2722,CVE-2009-2723,CVE-2009-2724,                                       CVE-2008-5515,CVE-2009-0033,CVE-2009-0580,                    CVE-2009-0781,CVE-2009-0783,CVE-2008-1232,                    CVE-2008-1947,CVE-2008-2370,CVE-2007-5333,                    CVE-2007-5342,CVE-2007-5461,CVE-2007-6286,                    CVE-2008-0002,                                        CVE-2009-1252,CVE-2009-0159,                                        CVE-2008-3528,CVE-2008-5700,CVE-2009-0028,                    CVE-2009-0269,CVE-2009-0322,CVE-2009-0675,                    CVE-2009-0676,CVE-2009-0778,CVE-2008-4307,                    CVE-2009-0834,CVE-2009-1337,CVE-2009-0787,                    CVE-2009-1336,CVE-2009-1439,CVE-2009-1633,                    CVE-2009-1072,CVE-2009-1630,CVE-2009-1192,                    CVE-2007-5966,CVE-2009-1385,CVE-2009-1388,                    CVE-2009-1389,CVE-2009-1895,CVE-2009-2406,                    CVE-2009-2407,CVE-2009-2692,CVE-2009-2698,                    CVE-2009-0745,CVE-2009-0746,CVE-2009-0747,                    CVE-2009-0748,CVE-2009-2847,CVE-2009-2848,                                       CVE-2007-2052,CVE-2007-4965,CVE-2008-1721,                    CVE-2008-1887,CVE-2008-2315,CVE-2008-3142,                    CVE-2008-3143,CVE-2008-3144,CVE-2008-4864,                    CVE-2008-5031,                                        CVE-2009-0696,                                        CVE-2009-2414,CVE-2009-2416,                                        CVE-2009-2417,                                        CVE-2007-2052

VMware ESX Server是为适用于任何系统环境的企业级虚拟计算机软件。

VMware vCenter、ESX、vMA产品在第三方组件的实现上存在多个漏洞，这些漏洞可造成缓冲区溢出，导致攻击者可以执行任意代码。

<*来源：VMware （vmware-security-alert@vmware.com）
  
  链接：http://www.vmware.com/security/advisories/VMSA-2009-0016.html
*>

建议：

---

厂商补丁：

VMWare
------
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

http://www.vmware.com/security/

浏览次数：2650
严重程度：0（网友投票）