CVE-2007-1070

Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62, allow remote attackers to execute arbitrary code via crafted RPC requests to TmRpcSrv.dll that trigger overflows when calling the (1) CMON_NetTestConnection, (2) CMON_ActiveUpdate, and (3) CMON_ActiveRollback functions in (a) StCommon.dll, and (4) ENG_SetRealTimeScanConfigInfo and (5) ENG_SendEMail functions in (b) eng50.dll.

Link	Resource
http://www.tippingpoint.com/security/advisories/TSRT-07-01.html	Vendor Advisory
http://www.tippingpoint.com/security/advisories/TSRT-07-02.html	Vendor Advisory
http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034290	Patch Vendor Advisory
http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch1_readme.txt	Vendor Advisory
http://www.kb.cert.org/vuls/id/349393	US Government Resource
http://www.kb.cert.org/vuls/id/466609	US Government Resource
http://www.kb.cert.org/vuls/id/630025	US Government Resource
http://www.kb.cert.org/vuls/id/730433	US Government Resource
http://www.securityfocus.com/bid/22639
http://www.securitytracker.com/id?1017676
http://secunia.com/advisories/24243
http://osvdb.org/33042
http://www.vupen.com/english/advisories/2007/0670
https://exchange.xforce.ibmcloud.com/vulnerabilities/32601
https://exchange.xforce.ibmcloud.com/vulnerabilities/32594
http://www.securityfocus.com/archive/1/460690/100/0/threaded
http://www.securityfocus.com/archive/1/460686/100/0/threaded

Configuration 1

cpe:2.3:a:trend_micro:serverprotect:5.61:*:network_appliance_filer:*:*:*:*:* cpe:2.3:a:trend_micro:serverprotect:5.62:*:network_appliance_filer:*:*:*:*:* cpe:2.3:a:trend_micro:serverprotect:5.58:*:emc:*:*:*:*:*

---

Published : 2007-02-21 11:28

Updated : 2018-10-16 04:36

---

NVD link : CVE-2007-1070

Mitre link : CVE-2007-1070

No products.

NVD-CWE-Other