Read the docs
TI-2007-04083 Aliases CVE-2007-4218GHSA-gp64-xw5c-22fh

Multiple buffer overflows in the ServerProtect service (SpntSvc.exe) in Trend Micro…

Priority MEDIUM 57CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

Multiple buffer overflows in the ServerProtect service (SpntSvc.exe) in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allow remote attackers to execute arbitrary code via certain RPC requests to certain TCP ports that are processed by the (1) RPCFN_ENG_NewManualScan, (2) RPCFN_ENG_TimedNewManualScan, and (3) RPCFN_SetComputerName functions in (a) StRpcSrv.dll; the (4) RPCFN_CMON_SetSvcImpersonateUser and (5) RPCFN_OldCMON_SetSvcImpersonateUser functions in (b) Stcommon.dll; the (6) RPCFN_ENG_TakeActionOnAFile and (7) RPCFN_ENG_AddTaskExportLogItem functions in (c) Eng50.dll; the (8) NTF_SetPagerNotifyConfig function in (d) Notification.dll; or the (9) RPCFN_CopyAUSrc function in the (e) ServerProtect Agent service.

Why it matters now

EPSS 0.13021 96th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:trend_micro:serverprotect:5.58:build_1176_for_windows:*:*:*:*:*:*5.58 build_1176_for_windowsVulnerableTrend Micro
  • cpe:2.3:a:trend_micro:serverprotect:5.58:build_1176_for_windows:*:*:*:*:*:* Versions 5.58 build_1176_for_windows Vulnerable ·Trend Micro

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2007-4218
  2. 2026-10-03 Alias added: GHSA-gp64-xw5c-22fh

References

Advisory 6

Other 2

  • TI-2007-02424 Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security… CVSS 2.0HIGH 10.0
  • TI-2007-01038 Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC… CVSS 2.0HIGH 10.0
  • TI-2007-06204 SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch… CVSS 2.0HIGH 10.0
  • TI-2007-04084 Integer overflow in the RPCFN_SYNC_TASK function in StRpcSrv.dll, as used by the… CVSS 2.0HIGH 10.0
  • TI-2007-04579 Stack-based buffer overflow in the TMregChange function in TMReg.dll in Trend Micro… CVSS 2.0HIGH 10.0
  • TI-2007-00069 Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7… CVSS 2.0HIGH 10.0
See all 24 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences