What is CVE-2007-2508?

CVE-2007-2508 is a vulnerability in Trend Micro Serverprotect, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2007-05-08.

Is CVE-2007-2508 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Trend Micro Serverprotect

CVE-2007-2508

Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in SpntSvc.exe; or (2) TCP port 3628, which triggers an overflow in EarthAgent.exe. NOTE: both issues are reachable via TmRpcSrv.dll.

Vulnerability class: Buffer Overflow

Published 2007-05-08 · last modified 2026-06-16.

CVSS v2 metric

CVSS v2 base score 10.0 (High). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.772 (99.6th percentile), scored 2026-10-17.

High probability of exploitation in the next 30 days — patch promptly. 100th percentile — 99.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.772 · newest: 0.772 · change: 0.000

Affected products

Trend Micro Serverprotect

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

References

www.vupen.com/english/advisories/2007/1689 (vdb-entry, Vendor Advisory)
exchange.xforce.ibmcloud.com/vulnerabilities/34163 (vdb-entry)
osvdb.org/35790 (vdb-entry)
www.zerodayinitiative.com/advisories/ZDI-07-025.html (Vendor Advisory)
www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch2_read… (Patch, Vendor Advisory)
www.securityfocus.com/archive/1/467932/100/0/threaded (mailing-list)
www.kb.cert.org/vuls/id/515616 (US Government Resource, third-party-advisory)
www.securityfocus.com/bid/23868 (vdb-entry)
www.securityfocus.com/archive/1/467933/100/0/threaded (mailing-list)
www.securityfocus.com/bid/23866 (Exploit, vdb-entry)

Frequently asked questions

What is CVE-2007-2508?: CVE-2007-2508 is a vulnerability in Trend Micro Serverprotect, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2007-05-08.
Is CVE-2007-2508 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.