Vulnerability Report

CVE-2007-1070

Title: Trend Micro Serverprotect RCE

Memory Corruption

Proof Of Concept

PoC Available for CVE-2007-1070

CWE Category NVD-CWE-noinfo

Published Date Feb 21, 2007

Modified Date Jun 16, 2026

Exploit Status Available

Score 10.0 CVSS v2.0

Exploit Probability (EPSS)

71.88%

Vulnerability Summary

CVE-2007-1070: Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62, allow remote attackers to execute arbitrary code via crafted RPC requests to TmRpcSrv.dll that trigger overflows when calling the (1) CMON_NetTestConnection, (2) CMON_ActiveUpdate, and (3) CMON_ActiveRollback functions in (a) StCommon.dll, and (4) ENG_SetRealTimeScanConfigInfo and (5) ENG_SendEMail functions in (b) eng50.dll.

Impacted Vendors

trend_micro 1

Reference Links

http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034290 http://osvdb.org/33042 http://secunia.com/advisories/24243 http://www.kb.cert.org/vuls/id/349393 http://www.kb.cert.org/vuls/id/466609 http://www.kb.cert.org/vuls/id/630025 http://www.kb.cert.org/vuls/id/730433 http://www.securityfocus.com/archive/1/460686/100/0/threaded http://www.securityfocus.com/archive/1/460690/100/0/threaded http://www.securityfocus.com/bid/22639 http://www.securitytracker.com/id?1017676 http://www.tippingpoint.com/security/advisories/TSRT-07-01.html http://www.tippingpoint.com/security/advisories/TSRT-07-02.html http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch1_readme.txt http://www.vupen.com/english/advisories/2007/0670 https://exchange.xforce.ibmcloud.com/vulnerabilities/32594 https://exchange.xforce.ibmcloud.com/vulnerabilities/32601 http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034290 http://osvdb.org/33042 http://secunia.com/advisories/24243 http://www.kb.cert.org/vuls/id/349393 http://www.kb.cert.org/vuls/id/466609 http://www.kb.cert.org/vuls/id/630025 http://www.kb.cert.org/vuls/id/730433 http://www.securityfocus.com/archive/1/460686/100/0/threaded http://www.securityfocus.com/archive/1/460690/100/0/threaded http://www.securityfocus.com/bid/22639 http://www.securitytracker.com/id?1017676 http://www.tippingpoint.com/security/advisories/TSRT-07-01.html http://www.tippingpoint.com/security/advisories/TSRT-07-02.html http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch1_readme.txt http://www.vupen.com/english/advisories/2007/0670 https://exchange.xforce.ibmcloud.com/vulnerabilities/32594 https://exchange.xforce.ibmcloud.com/vulnerabilities/32601

CVSS v2.0

Source Entity [email protected]

Severity HIGH

10.0

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:L/Au:N/C:C/I:C/A:C

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2007-1070 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/4367

View Code

Exploit-DB https://www.exploit-db.com/exploits/16827

View Code

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 09, 2025 MODIFIED

Vulnerability data or affected products updated.

February 21, 2007 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected Stack

No specific products linked.