{"schemaVersion":3,"id":"CVE-2007-2508","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in SpntSvc.exe; or (2) TCP port 3628, which triggers an overflow in EarthAgent.exe.  NOTE: both issues are reachable via TmRpcSrv.dll.","dates":{"published":"2007-05-08T23:00:00.000Z","modified":"2024-08-07T13:42:33.395Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.77194,"percentile":0.99552,"severity":"critical","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.77194},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.77194,"percentile":0.99552}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.77194,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.77194,"percentile":0.99552}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_6923A0047FEBBE78","name":"Exploit Reference (securityfocus.com)","source":"reference","url":"http://www.securityfocus.com/bid/23866","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"16828","name":"Trend Micro ServerProtect 5.58 - 'CreateBinding()' Remote Buffer Overflow (Metasploit)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/16828","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"windows","file":"exploits/windows/remote/16828.rb","codes":["CVE-2007-2508","OSVDB-35790"]},"metasploit":null},{"id":"16829","name":"Trend Micro ServerProtect 5.58 - 'EarthAgent.exe' Remote Buffer Overflow (Metasploit)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/16829","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"windows","file":"exploits/windows/remote/16829.rb","codes":["CVE-2007-2508","OSVDB-35789"]},"metasploit":null},{"id":"29964","name":"Trend Micro ServerProtect 5.58 - 'SpntSvc.exe' Remote Stack Buffer Overflow","source":"exploit-database","url":"https://www.exploit-db.com/exploits/29964","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"windows","file":"exploits/windows/remote/29964.rb","codes":["CVE-2007-2508","OSVDB-35790"]},"metasploit":null},{"id":"MSF_EXPLOIT_WINDOWS_ANTIVIRUS_TRENDMICRO_SERVERPROTECT_CREATEBINDING","name":"Trend Micro ServerProtect 5.58 CreateBinding() Buffer Overflow","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/windows/antivirus/trendmicro_serverprotect_createbinding.rb","maturity":"weaponized","reliabilityScore":0.6666666666666666,"verified":true,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/windows/antivirus/trendmicro_serverprotect_createbinding","rank":"400","rankName":"good","postAuth":false,"check":false,"stability":["unknown-stability"],"sideEffects":["unknown-side-effects"],"reliability":["unknown-reliability"]}},{"id":"MSF_EXPLOIT_WINDOWS_ANTIVIRUS_TRENDMICRO_SERVERPROTECT_EARTHAGENT","name":"Trend Micro ServerProtect 5.58 EarthAgent.EXE Buffer Overflow","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/windows/antivirus/trendmicro_serverprotect_earthagent.rb","maturity":"weaponized","reliabilityScore":0.6666666666666666,"verified":true,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/windows/antivirus/trendmicro_serverprotect_earthagent","rank":"400","rankName":"good","postAuth":false,"check":false,"stability":["unknown-stability"],"sideEffects":["unknown-side-effects"],"reliability":["unknown-reliability"]}}],"exploitCount":6,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"trend_micro","product":"serverprotect","name":"serverprotect","label":"serverprotect","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 5.58","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 5.58","eol":null,"hubHref":"/vendor/trend_micro/serverprotect"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.vupen.com/english/advisories/2007/1689","label":"www.vupen.com/english/advisories/2007/1689","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34163","label":"exchange.xforce.ibmcloud.com/vulnerabilities/34163","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://osvdb.org/35790","label":"osvdb.org/35790","hostname":"osvdb.org","tags":["VDB Entry","X Refsource OSVDB"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-07-025.html","label":"www.zerodayinitiative.com/advisories/ZDI-07-025.html","hostname":"www.zerodayinitiative.com","tags":["X Refsource MISC","Vendor Advisory"]},{"url":"http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch2_readme.txt","label":"www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch2_readme.txt","hostname":"www.trendmicro.com","tags":["X Refsource CONFIRM","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/467932/100/0/threaded","label":"www.securityfocus.com/archive/1/467932/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://www.kb.cert.org/vuls/id/515616","label":"www.kb.cert.org/vuls/id/515616","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/23868","label":"www.securityfocus.com/bid/23868","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://www.securityfocus.com/archive/1/467933/100/0/threaded","label":"www.securityfocus.com/archive/1/467933/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://www.securityfocus.com/bid/23866","label":"www.securityfocus.com/bid/23866","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34162","label":"exchange.xforce.ibmcloud.com/vulnerabilities/34162","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://securitytracker.com/id?1018010","label":"securitytracker.com/id?1018010","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Patch"]},{"url":"http://secunia.com/advisories/25186","label":"secunia.com/advisories/25186","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://osvdb.org/35789","label":"osvdb.org/35789","hostname":"osvdb.org","tags":["VDB Entry","X Refsource OSVDB"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-07-024.html","label":"www.zerodayinitiative.com/advisories/ZDI-07-024.html","hostname":"www.zerodayinitiative.com","tags":["X Refsource MISC","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/488424","label":"www.kb.cert.org/vuls/id/488424","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2007-05-08T23:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T13:42:33.395Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":90,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T05:36:50.291Z","stale":false,"partial":false}}