Vulnerability Intelligence Report
CVE-2007-3873
Stack-based buffer overflow in vstlib32.dll 1.2.0.1012 in the SSAPI Engine 5.0.0.1066 through 5.2.0.1012 in Trend Micro AntiSpyware 3.5 and PC-Cillin Internet Security 2007 15.0 through 15.3, when the Venus Spy Trap (VST) feature is enabled, allows local users to cause a denial of service (service crash) or execute arbitrary code via a file with a long pathname, which triggers the overflow during a ReadDirectoryChangesW callback notification.
No Active Exploit Signals
CVSS Base Score
6.9
MEDIUM
EPSS Probability:0.42%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| trend_micro | antispyware | 3.5 |
| trend_micro | pc-cillin_internet_security_2007 | 15.0, 15.2, 15.2_patch, 15.3 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.423%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2007-07-18T00:00:00 |
| Published | 2007-08-22T23:00:00 |
| Patch Date | 2007-08-20 |
| Last Updated | 2024-08-07T14:37:04 |
Community Chatter & Buzz