NVD

Id
56348  
Name
CVE-2007-4219  
Description
Integer overflow in the RPCFN_SYNC_TASK function in StRpcSrv.dll, as used by the ServerProtect service (SpntSvc.exe), in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allows remote attackers to execute arbitrary code via a certain integer field in a request packet to TCP port 5168, which triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-08-22  
Modified Date
2011-10-11  
Seq
2007-4219  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
286969 56348 CVE-2007-4219 20070821 Trend Micro ServerProtect RPCFN_SYNC_TASK Integer Overflow Vulnerability  View
286970 56348 CVE-2007-4219 3052  View
286971 56348 CVE-2007-4219 1018594  View
286972 56348 CVE-2007-4219 VU#959400  View
286973 56348 CVE-2007-4219 25396  View
286974 56348 CVE-2007-4219 http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch4_readme.txt  View
286975 56348 CVE-2007-4219 TA07-235A  View
286976 56348 CVE-2007-4219 ADV-2007-2934  View
286977 56348 CVE-2007-4219 serverprotect-rpcfnsynctask-bo(36168)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51960 JVNDB-2007-000623 Trend Micro ServerProtect の RPCFN_SYNC_TASK() 関数におけるヒープオーバーフローの脆弱性 Trend Micro ServerProtect の RPCFN_SYNC_TASK() 関数には、TCP ポートの 5168 番に対するリクエストパケットにおける整数フィールドの処理に不備が存在するために、ヒープオーバーフローが発生する脆弱性が存在します。 CVE-2007-4219 27574 CVE-2007-4219 56348 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000623.html 2007-08-21 2007-08-30 View