CVE-2007-2508

HighPublished

Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code...

Published: May 8, 2007
Updated: Aug 7, 2024
Assigning CNA: mitre
Evidence observed: May 7, 2007

Primary CVSS

10.0/ 10High

nvd · CVSS 2.0

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS probability estimate

77.2%

High · next 30 days

Percentile: 99.5%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in SpntSvc.exe; or (2) TCP port 3628, which triggers an overflow in EarthAgent.exe. NOTE: both issues are reachable via TmRpcSrv.dll.

Sources

Trend Micro ServerProtect 5.58 - 'CreateBinding()' Remote Buffer Overflow (Metasploit)Exploit
Metasploit · windows · Apr 30, 2010
Trend Micro ServerProtect 5.58 - 'EarthAgent.exe' Remote Buffer Overflow (Metasploit)Exploit
Metasploit · windows · Apr 30, 2010
Trend Micro ServerProtect 5.58 - 'SpntSvc.exe' Remote Stack Buffer OverflowExploit
MC · windows · May 7, 2007

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.