CVE-2007-2508
Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2...
Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in SpntSvc.exe; or (2) TCP port 3628, which triggers an overflow in EarthAgent.exe. NOTE: both issues are reachable via TmRpcSrv.dll.
Exploit likelihood
What each source reports
NVD Score used
Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in SpntSvc.exe; or (2) TCP port 3628, which triggers an overflow in EarthAgent.exe. NOTE: both issues are reachable via TmRpcSrv.dll.
- Record
CVE-2007-2508- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in SpntSvc.exe; or (2) TCP port 3628, which triggers an overflow in EarthAgent.exe. NOTE: both issues are reachable via TmRpcSrv.dll.
- Record
CVE-2007-2508- Updated
- 2026-11-02
EUVDEUVD-2007-2501 No score
Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in SpntSvc.exe; or (2) TCP port 3628, which triggers an overflow in EarthAgent.exe. NOTE: both issues are reachable via TmRpcSrv.dll.
- Record
EUVD-2007-2501- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-628g-c62g-r2j2 No score
Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2...
Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in SpntSvc.exe; or (2) TCP port 3628, which triggers an overflow in EarthAgent.exe. NOTE: both issues are reachable via TmRpcSrv.dll.
- Record
GHSA-628g-c62g-r2j2- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Trend Micro ServerProtect 5.58 - 'CreateBinding()' Remote Buffer Overflow (Metasploit) | 2010-04-30 |
| Exploit-DB | Trend Micro ServerProtect 5.58 - 'EarthAgent.exe' Remote Buffer Overflow (Metasploit) | 2010-04-30 |
| Exploit-DB | Trend Micro ServerProtect 5.58 - 'SpntSvc.exe' Remote Stack Buffer Overflow | 2007-05-07 |
| Metasploit | Trend Micro ServerProtect 5.58 CreateBinding() Buffer Overflow | 2007-05-07 |
| Metasploit | Trend Micro ServerProtect 5.58 EarthAgent.EXE Buffer Overflow | 2007-05-07 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, Metasploit | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2508 is a high vulnerability (CVSS 10.0) in Trend Micro Serverprotect, published May 8, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 77.2%, the 99th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2007/1689
exchange.xforce.ibmcloud.com/vulnerabilities/34163
osvdb.org/35790
zerodayinitiative.com/advisories/ZDI-07-025.html
trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch2_readme.txt
securityfocus.com/archive/1/467932/100/0/threaded
Show 12 moreShow less
kb.cert.org/vuls/id/515616
securitytracker.com/id?1018010
secunia.com/advisories/25186
nvd.nist.gov/vuln/detail/CVE-2007-2508
github.com/advisories/GHSA-628g-c62g-r2j2