CVE-2007-0073 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Micro Serverprotect

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
10.0CRITICALNVD
EPSS
23.9%
top 3.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Trend Micro Serverprotect
Timeline
PublishedNov 17
Latest updateMay 1

Description

Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a file read operation over RPC.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

▶NVDtrend_micro/serverprotect5.58, 5.7+1

🔴Vulnerability Details

2
GHSA
GHSA-293x-x4gc-p56j: Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5↗2022-05-01
▶
CVEList
CVE-2007-0073: Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5↗2008-11-17
▶
CVE-2007-0073 — Trend Micro Serverprotect vulnerability | cvebase