{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[],"affected_systems_content":"<P>Trend Micro ServerProtect versions 5.58 et ant\u00e9rieures sur  Microsoft Windows.</P>","content":"## Description\n\nDes vuln\u00e9rabilit\u00e9s de type d\u00e9bordement de m\u00e9moire ont \u00e9t\u00e9 identifi\u00e9es\nsur Trend Micro ServerProtect. Les modules concern\u00e9s sont stcommon.dll,\nstcommon.dll, eng50.dll, earthagent.exe, et AgRpcCln.dll. Ces fichiers\nappellent des fonctions ne g\u00e9rant pas correctement certains messages RPC\nsp\u00e9cialement construits. Un attaquant exploitant l'une de ces\nvuln\u00e9rabilit\u00e9s pourrait ex\u00e9cuter du code arbitraire \u00e0 distance.\n\n## Solution\n\nLes mises \u00e0 jour Security Patch 2 et Security Patch 3 de l'\u00e9diteur\ncorrigent ces vuln\u00e9rabilit\u00e9s.\n","cves":[{"name":"CVE-2007-2508","url":"https://www.cve.org/CVERecord?id=CVE-2007-2508"},{"name":"CVE-2007-2528","url":"https://www.cve.org/CVERecord?id=CVE-2007-2528"}],"links":[{"title":"R\u00e9f\u00e9rence CVE CVE-2007-2508 :","url":"http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-2508"},{"title":"R\u00e9f\u00e9rence CVE CVE-2007-2528 :","url":"http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-2528"},{"title":"Mises \u00e0 jour pour Trend Micro ServerProtect :","url":"http://www.trendmicro.com/download_beta/product.asp?productid=17"}],"reference":"CERTA-2007-AVI-210","revisions":[{"description":"version initiale.","revision_date":"2007-05-09T00:00:00.000000"}],"risks":[{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"}],"summary":"Des vuln\u00e9rabilit\u00e9s sur <span class=\"textit\">Trend Micro\nServerProtect</span> permettent \u00e0 une personne malintentionn\u00e9e distante\nd'ex\u00e9cuter du code arbitraire.\n","title":"Vuln\u00e9rabilit\u00e9s dans Trend Micro ServerProtect","vendor_advisories":[{"published_at":null,"title":"Mises \u00e0 jour de Trend Micro ServerProtect","url":null}]}
