CVE-2007-2508

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

77.19%

Published

May 8, 2007

Modified

Jun 16, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBTrend Micro ServerProtect 5.58 - 'CreateBinding()' Remote Buffer Overflow (Metasploit)Exploit-DBTrend Micro ServerProtect 5.58 - 'EarthAgent.exe' Remote Buffer Overflow (Metasploit)Exploit-DBTrend Micro ServerProtect 5.58 - 'SpntSvc.exe' Remote Stack Buffer Overflow

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in SpntSvc.exe; or (2) TCP port 3628, which triggers an overflow in EarthAgent.exe. NOTE: both issues are reachable via TmRpcSrv.dll.

Weaknesses (CWE)

CWE-119

Affected Products (1)

trend_micro · serverprotectvulnerable

References (20)

http://osvdb.org/35789

http://osvdb.org/35790

http://secunia.com/advisories/25186

PatchVendor Advisory

http://securitytracker.com/id?1018010

Patch

http://www.kb.cert.org/vuls/id/488424