← back
CVE-2007-1070

CVE-2007-1070

EPSS 73.8%
Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62, allow remote attackers to execute arbitrary code via crafted RPC requests to TmRpcSrv.dll that trigger overflows when calling the (1) CMON_NetTestConnection, (2) CMON_ActiveUpdate, and (3) CMON_ActiveRollback functions in (a) StCommon.dll, and (4) ENG_SetRealTimeScanConfigInfo and (5) ENG_SendEMail functions in (b) eng50.dll.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/4367unverifiedexploitdbwww.exploit-db.com/exploits/16827unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034290http://osvdb.org/33042http://secunia.com/advisories/24243https://exchange.xforce.ibmcloud.com/vulnerabilities/32594https://exchange.xforce.ibmcloud.com/vulnerabilities/32601http://www.kb.cert.org/vuls/id/349393http://www.kb.cert.org/vuls/id/466609http://www.kb.cert.org/vuls/id/630025http://www.kb.cert.org/vuls/id/730433http://www.securityfocus.com/archive/1/460686/100/0/threadedhttp://www.securityfocus.com/archive/1/460690/100/0/threadedhttp://www.securityfocus.com/bid/22639