{"id":"CVE-2007-2508","url":"https://www.cyber-defence.io/tools/cve/CVE-2007-2508","generatedAt":"2026-10-27T17:44:20.291Z","title":"Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the…","description":"Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in SpntSvc.exe; or (2) TCP port 3628, which triggers an overflow in EarthAgent.exe.  NOTE: both issues are reachable via TmRpcSrv.dll.","published":"2007-05-08T23:19:00.000Z","lastModified":"2026-06-16T22:39:45.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":10,"severity":"HIGH","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C"},"cwe":["CWE-119"],"affected":["trend micro/serverprotect"],"epss":{"score":0.77194,"percentile":0.9955,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":3,"verified":true,"firstPublished":"2007-05-07","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":16829,"kind":"exploit","title":"Trend Micro ServerProtect 5.58 - 'EarthAgent.exe' Remote Buffer Overflow (Metasploit)","url":"https://www.exploit-db.com/exploits/16829","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/16829.rb","file":"exploits/windows/remote/16829.rb","published":"2010-04-30","added":"2010-04-30","updated":"2011-03-06","author":"Metasploit","type":"remote","platform":"windows","port":null,"verified":true,"codes":["CVE-2007-2508","OSVDB-35789"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":16828,"kind":"exploit","title":"Trend Micro ServerProtect 5.58 - 'CreateBinding()' Remote Buffer Overflow (Metasploit)","url":"https://www.exploit-db.com/exploits/16828","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/16828.rb","file":"exploits/windows/remote/16828.rb","published":"2010-04-30","added":"2010-04-30","updated":"2011-03-06","author":"Metasploit","type":"remote","platform":"windows","port":null,"verified":true,"codes":["CVE-2007-2508","OSVDB-35790"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":29964,"kind":"exploit","title":"Trend Micro ServerProtect 5.58 - 'SpntSvc.exe' Remote Stack Buffer Overflow","url":"https://www.exploit-db.com/exploits/29964","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/29964.rb","file":"exploits/windows/remote/29964.rb","published":"2007-05-07","added":"2007-05-07","updated":"2013-12-02","author":"MC","type":"remote","platform":"windows","port":null,"verified":true,"codes":["CVE-2007-2508","OSVDB-35790"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://www.securityfocus.com/bid/23868/info"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 77.2%, higher than 100% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://osvdb.org/35789","source":"cve@mitre.org"},{"url":"http://osvdb.org/35790","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/25186","tags":["Patch","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1018010","tags":["Patch"],"source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/488424","tags":["US Government Resource"],"source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/515616","tags":["US Government Resource"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/467932/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/467933/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/23866","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/23868","source":"cve@mitre.org"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch2_readme.txt","tags":["Patch","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/1689","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-07-024.html","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-07-025.html","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34162","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34163","source":"cve@mitre.org"},{"url":"http://osvdb.org/35789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/35790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25186","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1018010","tags":["Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/488424","tags":["US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/515616","tags":["US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/467932/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/467933/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/23866","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/23868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch2_readme.txt","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/1689","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-07-024.html","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-07-025.html","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34163","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-2508","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}