CVE-2007-1070: trend_micro serverprotect
Vulnerability summary
CVE-2007-1070 is a high (CVSS 10.0) vulnerability in trend_micro serverprotect. EPSS estimates a 72.98% chance of exploitation in the next 30 days, higher than 99.4% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 21-02-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62, allow remote attackers to execute arbitrary code via crafted RPC requests to TmRpcSrv.dll that trigger overflows when calling the (1) CMON_NetTestConnection, (2) CMON_ActiveUpdate, and (3) CMON_ActiveRollback functions in (a) StCommon.dll, and (4) ENG_SetRealTimeScanConfigInfo and (5) ENG_SendEMail functions in (b) eng50.dll.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
72.98%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 72.98% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundTrend Micro ServerProtect - 'eng50.dll' Remote Stack Overflow
Maturity: weaponized
Trend Micro ServerProtect 5.58 - Remote Buffer Overflow (Metasploit)
Maturity: weaponized
Trend Micro ServerProtect 5.58 Buffer Overflow
exploit/windows/antivirus/trendmicro_serverprotect
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Trend_micro1 product
- serverprotect5.58 | 5.61 | 5.62
1 vendor · 1 product
References
17 links- www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch1_readme.txtX Refsource CONFIRMVendor Advisory
Show all 17 references
- esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034290X Refsource CONFIRMPatchVendor Advisory