CVE-2007-2508

Name: CVE-2007-2508
Creator: NVD / NIST
Published: 2007-05-08T23:19:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 77.19%

Last modified Jun 16, 2026

CVE-2007-2508 is a vulnerability of currently unknown severity. Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in SpntSvc.exe; or (2) TCP port 3628, which triggers an overflow in EarthAgent.exe. NOTE: both issues are reachable via TmRpcSrv.dll.. EPSS estimates a 77.19% chance of exploitation in the next 30 days.

Description

Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in SpntSvc.exe; or (2) TCP port 3628, which triggers an overflow in EarthAgent.exe. NOTE: both issues are reachable via TmRpcSrv.dll.

Metrics

EPSS Probability

77.19%

99.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-119

Affected Software

Vendor	Product	Versions
Trend Micro	Serverprotect	<= 5.58

References

http://osvdb.org/35789
http://osvdb.org/35790
http://secunia.com/advisories/25186Patch, Vendor Advisory
http://securitytracker.com/id?1018010Patch
http://www.kb.cert.org/vuls/id/488424US Government Resource
http://www.kb.cert.org/vuls/id/515616US Government Resource
http://www.securityfocus.com/archive/1/467932/100/0/threaded
http://www.securityfocus.com/archive/1/467933/100/0/threaded
http://www.securityfocus.com/bid/23866Exploit
http://www.securityfocus.com/bid/23868
http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch2_readme.txtPatch, Vendor Advisory
http://www.vupen.com/english/advisories/2007/1689Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-07-024.htmlVendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-07-025.htmlVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/34162
https://exchange.xforce.ibmcloud.com/vulnerabilities/34163
http://osvdb.org/35789
http://osvdb.org/35790
http://secunia.com/advisories/25186Patch, Vendor Advisory
http://securitytracker.com/id?1018010Patch
http://www.kb.cert.org/vuls/id/488424US Government Resource
http://www.kb.cert.org/vuls/id/515616US Government Resource
http://www.securityfocus.com/archive/1/467932/100/0/threaded
http://www.securityfocus.com/archive/1/467933/100/0/threaded
http://www.securityfocus.com/bid/23866Exploit
http://www.securityfocus.com/bid/23868
http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch2_readme.txtPatch, Vendor Advisory
http://www.vupen.com/english/advisories/2007/1689Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-07-024.htmlVendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-07-025.htmlVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/34162
https://exchange.xforce.ibmcloud.com/vulnerabilities/34163

Timeline

Published: May 8, 2007
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2007-2508?

How severe is CVE-2007-2508?

Severity scoring for CVE-2007-2508 is pending analysis. The EPSS model estimates a 77.19% probability of exploitation in the next 30 days.

How do I fix CVE-2007-2508?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2007-2508?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST