CVE-2007-6507
SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4,...
CVE-2007-6507 is a high vulnerability (CVSS 10.0) in Trend Micro Serverprotect, published December 20, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 36.6%, the 98th percentile. No source names a fixed version.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 36.6%EPSS, 98th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4, exposes unspecified dangerous sub-functions from StRpcSrv.dll in the DCE/RPC interface, which allows remote attackers to obtain "full file system access" and execute arbitrary code.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | TrendMicro ServerProtect File Access |
What each source reports
NVD Score used
SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4, exposes unspecified dangerous sub-functions from StRpcSrv.dll in the DCE/RPC interface, which allows remote attackers to obtain "full file system access" and execute arbitrary code.
- Record
CVE-2007-6507- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4, exposes unspecified dangerous sub-functions from StRpcSrv.dll in the DCE/RPC interface, which allows remote attackers to obtain "full file system access" and execute arbitrary code.
- Record
CVE-2007-6507- Updated
- 2026-11-02
EUVDEUVD-2007-6473No score
SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4, exposes unspecified dangerous sub-functions from StRpcSrv.dll in the DCE/RPC interface, which allows remote attackers to obtain "full file system access" and execute arbitrary code.
- Record
EUVD-2007-6473- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f227-6m9w-cq8hNo score
SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4,...
SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4, exposes unspecified dangerous sub-functions from StRpcSrv.dll in the DCE/RPC interface, which allows remote attackers to obtain "full file system access" and execute arbitrary code.
- Record
GHSA-f227-6m9w-cq8h- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| aliases, exploits, references, title | GitHub Advisories, Metasploit | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
osvdb.org/44318
securityfocus.com/bid/26912
zerodayinitiative.com/advisories/ZDI-07-077.html
trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch4_readme.txt
securityreason.com/securityalert/3475
secunia.com/advisories/26523
nvd.nist.gov/vuln/detail/CVE-2007-6507
github.com/advisories/GHSA-f227-6m9w-cq8h