CVE-2007-1070: Buffer Overflow

Published Feb 21, 2007

Updated

Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62, allow remote attackers to execute arbitrary code via crafted RPC requests to TmRpcSrv.dll that trigger overflows when calling the (1) CMONNetTestConnection, (2) CMONActiveUpdate, and (3) CMONActiveRollback functions in (a) StCommon.dll, and (4) ENGSetRealTimeScanConfigInfo and (5) ENGSendEMail functions in (b) eng50.dll.

Affected Software

9 affected components

Trend Micro ServerProtect=5.61

Trend Micro ServerProtect=5.62

Trend Micro ServerProtect=5.58

Microsoft Windows 2000

Microsoft Windows 2003 Server=r2

Microsoft Windows 2003 Server=sp2

Microsoft Windows NT

Microsoft Windows Vista

Microsoft Windows XP=gold

Remediation

Patch Available

http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034290

Event History

Feb 21, 2007

CVE Published

11:28 AM

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1070?

CVE-2007-1070 has a critical severity rating due to its potential to allow remote attackers to execute arbitrary code.

How do I fix CVE-2007-1070?

To fix CVE-2007-1070, upgrade to the latest versions of Trend Micro ServerProtect as recommended by Trend Micro.

What software is affected by CVE-2007-1070?

CVE-2007-1070 affects Trend Micro ServerProtect versions 5.58, 5.61, and 5.62 for Windows.

Can CVE-2007-1070 be exploited remotely?

Yes, CVE-2007-1070 can be exploited remotely via crafted RPC requests targeting the TmRpcSrv.dll.

What types of attacks are possible with CVE-2007-1070?

CVE-2007-1070 allows attackers to execute arbitrary code, which may lead to full system compromise.