← Database

CVE-2007-6507

CRITICAL CVSS: 10.0 Published: 2007-12-20 Modified: 2026-06-16

Description

SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4, exposes unspecified dangerous sub-functions from StRpcSrv.dll in the DCE/RPC interface, which allows remote attackers to obtain "full file system access" and execute arbitrary code.

Affected Platforms

Trend Micro Serverprotect

Weakness Type

CWE-264

References