CVE-2007-1070 Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62, allow remote attackers to execute arbitrary code via crafted...
HighCVSS 10.0
EPSS 73.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62, allow remote attackers to execute arbitrary code via crafted RPC requests to TmRpcSrv.dll that trigger overflows when calling the (1) CMON_NetTestConnection, (2) CMON_ActiveUpdate, and (3) CMON_ActiveRollback functions in (a) StCommon.dll, and (4) ENG_SetRealTimeScanConfigInfo and (5) ENG_SendEMail functions in (b) eng50.dll.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trend micro serverprotect | = 5.58 | No fix listed |
| trend micro serverprotect | = 5.61 | No fix listed |
| trend micro serverprotect | = 5.62 | No fix listed |
References
- esupport.trendmicro.com patch vendor-advisory
- 33042 vdb-entry
- 24243 third-party-advisory
- VU#349393 third-party-advisory us-government-resource
- VU#466609 third-party-advisory us-government-resource
- VU#630025 third-party-advisory us-government-resource
- VU#730433 third-party-advisory us-government-resource
- 20070220 TSRT-07-01: Trend Micro ServerProtect StCommon.dll Stack Overflow Vulnerabilities mailing-list
- 20070220 TSRT-07-02: Trend Micro ServerProtect eng50.dll Stack Overflow Vulnerabilities mailing-list
- 22639 vdb-entry
- 1017676 vdb-entry
- www.tippingpoint.com vendor-advisory
- www.tippingpoint.com vendor-advisory
- www.trendmicro.com vendor-advisory
- ADV-2007-0670 vdb-entry
- serverprotect-eng50-bo(32594) vdb-entry
- serverprotect-stcommon-bo(32601) vdb-entry