CVE-2007-1070
Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62, allow remote attackers to execute arbitrary code via crafted RPC requests to TmRpcSrv.dll that trigger overflows…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 71.9%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62, allow remote attackers to execute arbitrary code via crafted RPC requests to TmRpcSrv.dll that trigger overflows when calling the (1) CMON_NetTestConnection, (2) CMON_ActiveUpdate, and (3) CMON_ActiveRollback functions in (a) StCommon.dll, and (4) ENG_SetRealTimeScanConfigInfo and (5) ENG_SendEMail functions in (b) eng50.dll.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 71.88% probability · 99th percentile
- CISA KEV
- Not listed
- Affected
- trend micro/serverprotect
- Source
- cve@mitre.org
References
- http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034290Patch, Vendor Advisory
- http://osvdb.org/33042
- http://secunia.com/advisories/24243
- http://www.kb.cert.org/vuls/id/349393US Government Resource
- http://www.kb.cert.org/vuls/id/466609US Government Resource
- http://www.kb.cert.org/vuls/id/630025US Government Resource
- http://www.kb.cert.org/vuls/id/730433US Government Resource
- http://www.securityfocus.com/archive/1/460686/100/0/threaded
- http://www.securityfocus.com/archive/1/460690/100/0/threaded
- http://www.securityfocus.com/bid/22639
- http://www.securitytracker.com/id?1017676
- http://www.tippingpoint.com/security/advisories/TSRT-07-01.htmlVendor Advisory
- http://www.tippingpoint.com/security/advisories/TSRT-07-02.htmlVendor Advisory
- http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch1_readme.txtVendor Advisory
- http://www.vupen.com/english/advisories/2007/0670
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32594
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32601
- http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034290Patch, Vendor Advisory
- http://osvdb.org/33042
- http://secunia.com/advisories/24243
- http://www.kb.cert.org/vuls/id/349393US Government Resource
- http://www.kb.cert.org/vuls/id/466609US Government Resource
- http://www.kb.cert.org/vuls/id/630025US Government Resource
- http://www.kb.cert.org/vuls/id/730433US Government Resource
- http://www.securityfocus.com/archive/1/460686/100/0/threaded
- http://www.securityfocus.com/archive/1/460690/100/0/threaded
- http://www.securityfocus.com/bid/22639
- http://www.securitytracker.com/id?1017676
- http://www.tippingpoint.com/security/advisories/TSRT-07-01.htmlVendor Advisory
- http://www.tippingpoint.com/security/advisories/TSRT-07-02.htmlVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.