CVE-2007-2533: trend_micro serverprotect
Vulnerability summary
CVE-2007-2533 is a high (CVSS 10.0) vulnerability in trend_micro serverprotect. EPSS estimates a 5.36% chance of exploitation in the next 30 days, higher than 92.5% of scored vulnerabilities.
Timeline
- 09-05-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2- Build 1174 allow remote attackers to execute arbitrary code via a crafted RPC message processed by the (1) the RPCFN_ActiveRollback function in (a) stcommon.dll, or the (2) ENG_SetRealTimeScanConfigInfo or (3) ENG_SendEmail functions in (b) eng50.dll.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
5.36%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
0.00 pp
From 5.36% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Trend_micro1 product
- serverprotect5.58
1 vendor · 1 product
References
6 links- www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch2_readme.txtX Refsource CONFIRMPatchVendor Advisory