CVE-2007-4219

Integer overflow in the RPCFN_SYNC_TASK function in StRpcSrv.dll, as used by the ServerProtect service (SpntSvc.exe), in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allows remote attackers to execute arbitrary code via a certain integer field in a request packet to TCP port 5168, which triggers a heap-based buffer overflow.

• CWE-189

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=588
• http://secunia.com/advisories/26523Patch, Vendor Advisory
• http://securityreason.com/securityalert/3052
• http://securitytracker.com/id?1018594
• http://www.kb.cert.org/vuls/id/959400US Government Resource
• http://www.securityfocus.com/bid/25396
• http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch4_readme.txt
• http://www.us-cert.gov/cas/techalerts/TA07-235A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2007/2934Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36168
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=588
• http://secunia.com/advisories/26523Patch, Vendor Advisory
• http://securityreason.com/securityalert/3052
• http://securitytracker.com/id?1018594
• http://www.kb.cert.org/vuls/id/959400US Government Resource
• http://www.securityfocus.com/bid/25396
• http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch4_readme.txt
• http://www.us-cert.gov/cas/techalerts/TA07-235A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2007/2934Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36168

Published

Aug 22, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-4211The ACL plugin in Dovecot before 1.0.3 allows remote authent…
• CVE-2007-4212Multiple cross-site scripting (XSS) vulnerabilities in the S…
• CVE-2007-4213Palm OS on Treo 650, 680, 700p, and 755p Smart phones allows…
• CVE-2007-4216vsdatant.sys 6.5.737.0 in Check Point Zone Labs ZoneAlarm be…
• CVE-2007-4217Stack-based buffer overflow in the domacro function in ftp i…
• CVE-2007-4218Multiple buffer overflows in the ServerProtect service (Spnt…
• CVE-2007-4220Directory traversal vulnerability in Motorola Timbuktu Pro b…
• CVE-2007-4221Multiple buffer overflows in Motorola Timbuktu Pro before 8.…
• CVE-2007-4222Buffer overflow in the TagAttributeListCopy function in nnot…
• CVE-2007-4223Dbgv.sys in Microsoft Sysinternals DebugView before 4.72 pro…
• CVE-2007-4224KDE Konqueror 3.5.7 allows remote attackers to spoof the URL…
• CVE-2007-4225Visual truncation vulnerability in KDE Konqueror 3.5.7 allow…