CVE-2007-4490
Multiple buffer overflows in EarthAgent.exe in Trend Micro ServerProtect 5.58 for Windows before...
Multiple buffer overflows in EarthAgent.exe in Trend Micro ServerProtect 5.58 for Windows before Security Patch 4 allow remote attackers to have an unknown impact via certain RPC function calls to (1) RPCFN_EVENTBACK_DoHotFix or (2) CMD_CHANGE_AGENT_REGISTER_INFO.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in EarthAgent.exe in Trend Micro ServerProtect 5.58 for Windows before Security Patch 4 allow remote attackers to have an unknown impact via certain RPC function calls to (1) RPCFN_EVENTBACK_DoHotFix or (2) CMD_CHANGE_AGENT_REGISTER_INFO.
- Record
CVE-2007-4490- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in EarthAgent.exe in Trend Micro ServerProtect 5.58 for Windows before Security Patch 4 allow remote attackers to have an unknown impact via certain RPC function calls to (1) RPCFN_EVENTBACK_DoHotFix or (2) CMD_CHANGE_AGENT_REGISTER_INFO.
- Record
CVE-2007-4490- Updated
- 2026-11-02
EUVDEUVD-2007-4473 No score
Multiple buffer overflows in EarthAgent.exe in Trend Micro ServerProtect 5.58 for Windows before Security Patch 4 allow remote attackers to have an unknown impact via certain RPC function calls to (1) RPCFN_EVENTBACK_DoHotFix or (2) CMD_CHANGE_AGENT_REGISTER_INFO.
- Record
EUVD-2007-4473- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wqxv-wp53-gjpf No score
Multiple buffer overflows in EarthAgent.exe in Trend Micro ServerProtect 5.58 for Windows before...
Multiple buffer overflows in EarthAgent.exe in Trend Micro ServerProtect 5.58 for Windows before Security Patch 4 allow remote attackers to have an unknown impact via certain RPC function calls to (1) RPCFN_EVENTBACK_DoHotFix or (2) CMD_CHANGE_AGENT_REGISTER_INFO.
- Record
GHSA-wqxv-wp53-gjpf- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4490 is a high vulnerability (CVSS 10.0) in Trend Micro Serverprotect, published August 22, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.51%, the 84th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2007/2934
trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch4_readme.txt
exchange.xforce.ibmcloud.com/vulnerabilities/36181
securityreason.com/securityalert/3052
secunia.com/advisories/26523
nvd.nist.gov/vuln/detail/CVE-2007-4490
github.com/advisories/GHSA-wqxv-wp53-gjpf