{"schemaVersion":3,"id":"CVE-2007-4218","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Multiple buffer overflows in the ServerProtect service (SpntSvc.exe) in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allow remote attackers to execute arbitrary code via certain RPC requests to certain TCP ports that are processed by the (1) RPCFN_ENG_NewManualScan, (2) RPCFN_ENG_TimedNewManualScan, and (3) RPCFN_SetComputerName functions in (a) StRpcSrv.dll; the (4) RPCFN_CMON_SetSvcImpersonateUser and (5) RPCFN_OldCMON_SetSvcImpersonateUser functions in (b) Stcommon.dll; the (6) RPCFN_ENG_TakeActionOnAFile and (7) RPCFN_ENG_AddTaskExportLogItem functions in (c) Eng50.dll; the (8) NTF_SetPagerNotifyConfig function in (d) Notification.dll; or the (9) RPCFN_CopyAUSrc function in the (e) ServerProtect Agent service.","dates":{"published":"2007-08-22T23:00:00.000Z","modified":"2024-08-07T14:46:39.405Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.13021,"percentile":0.96303,"severity":"medium","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.13021},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.13021,"percentile":0.96303}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.13021,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.13021,"percentile":0.96303}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"},{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"},{"id":"CWE-189","name":"Numeric Errors","description":"Weaknesses in this category are related to improper calculation or conversion of numbers.","type":"category","status":"Draft","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/189.html"}],"affected":[{"vendor":"trend_micro","product":"serverprotect","name":"serverprotect","label":"serverprotect","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.58:build_1176_for_windows","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.58:build_1176_for_windows","eol":null,"hubHref":"/vendor/trend_micro/serverprotect"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.kb.cert.org/vuls/id/109056","label":"www.kb.cert.org/vuls/id/109056","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=587","label":"labs.idefense.com/intelligence/vulnerabilities/display.php?id=587","hostname":"labs.idefense.com","tags":["Third Party Advisory","X Refsource IDEFENSE"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36174","label":"exchange.xforce.ibmcloud.com/vulnerabilities/36174","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://www.securityfocus.com/bid/25395","label":"www.securityfocus.com/bid/25395","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36176","label":"exchange.xforce.ibmcloud.com/vulnerabilities/36176","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36178","label":"exchange.xforce.ibmcloud.com/vulnerabilities/36178","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://www.securityfocus.com/archive/1/478866/100/0/threaded","label":"www.securityfocus.com/archive/1/478866/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://www.kb.cert.org/vuls/id/204448","label":"www.kb.cert.org/vuls/id/204448","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36175","label":"exchange.xforce.ibmcloud.com/vulnerabilities/36175","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-235A.html","label":"www.us-cert.gov/cas/techalerts/TA07-235A.html","hostname":"www.us-cert.gov","tags":["Third Party Advisory","X Refsource CERT","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2007/2934","label":"www.vupen.com/english/advisories/2007/2934","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch4_readme.txt","label":"www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch4_readme.txt","hostname":"www.trendmicro.com","tags":["X Refsource CONFIRM"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-07-050.html","label":"www.zerodayinitiative.com/advisories/ZDI-07-050.html","hostname":"www.zerodayinitiative.com","tags":["X Refsource MISC"]},{"url":"http://securitytracker.com/id?1018594","label":"securitytracker.com/id?1018594","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://securityreason.com/securityalert/3052","label":"securityreason.com/securityalert/3052","hostname":"securityreason.com","tags":["Third Party Advisory","X Refsource SREASON"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36172","label":"exchange.xforce.ibmcloud.com/vulnerabilities/36172","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://secunia.com/advisories/26523","label":"secunia.com/advisories/26523","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2007-08-22T23:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T14:46:39.405Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T03:37:08.610Z","stale":false,"partial":false}}