Login Request a demo
Unscored severity · published Feb 21, 2007
CVE-2007-1070
Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62, allow remote attackers to execute…
–
CVSS
73%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62, allow remote attackers to execute arbitrary code via crafted RPC requests to TmRpcSrv.dll that trigger overflows when calling the (1) CMON_NetTestConnection, (2) CMON_ActiveUpdate, and (3) CMON_ActiveRollback functions in (a) StCommon.dll, and (4) ENG_SetRealTimeScanConfigInfo and (5) ENG_SendEMail functions in (b) eng50.dll.
Exploitation
Is it being used?
Exploit prediction (EPSS)73.0% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SE
Serverprotect · Trend Micro
5.58; 5.58; 5.61; 5.62 · source: NVD
Affected product
SE
Serverprotect
Trend Micro
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1070
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1070
Patch
http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034290
osvdb.org
http://osvdb.org/33042
secunia.com
http://secunia.com/advisories/24243
US Government Resource
http://www.kb.cert.org/vuls/id/349393
US Government Resource
http://www.kb.cert.org/vuls/id/466609
US Government Resource
http://www.kb.cert.org/vuls/id/630025
More from Serverprotect
–
CVE-2008-0014
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly…
–
CVE-2008-0013
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly…
–
CVE-2008-0012
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly…
–
CVE-2007-0074
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly…
–
CVE-2007-0073
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly…