Unrated severityNVD Advisory· Published Aug 22, 2007· Updated Jun 16, 2026
CVE-2007-3873
CVE-2007-3873
Description
Stack-based buffer overflow in vstlib32.dll 1.2.0.1012 in the SSAPI Engine 5.0.0.1066 through 5.2.0.1012 in Trend Micro AntiSpyware 3.5 and PC-Cillin Internet Security 2007 15.0 through 15.3, when the Venus Spy Trap (VST) feature is enabled, allows local users to cause a denial of service (service crash) or execute arbitrary code via a file with a long pathname, which triggers the overflow during a ReadDirectoryChangesW callback notification.
Affected products
7cpe:2.3:a:trend_micro:antispyware:3.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:trend_micro:antispyware:3.5:*:*:*:*:*:*:*
- (no CPE)range: 3.5
cpe:2.3:a:trend_micro:pc-cillin_internet_security_2007:15.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:trend_micro:pc-cillin_internet_security_2007:15.0:*:*:*:*:*:*:*
- cpe:2.3:a:trend_micro:pc-cillin_internet_security_2007:15.2:*:*:*:*:*:*:*
- cpe:2.3:a:trend_micro:pc-cillin_internet_security_2007:15.2_patch:*:*:*:*:*:*:*
- cpe:2.3:a:trend_micro:pc-cillin_internet_security_2007:15.3:*:*:*:*:*:*:*
- Range: 15.0 through 15.3
Patches
Vulnerability mechanics
References
7- secunia.com/advisories/26557nvdPatchVendor Advisory
- securitytracker.com/idnvdPatchVendor Advisory
- esupport.trendmicro.com/support/consumer/search.donvd
- labs.idefense.com/intelligence/vulnerabilities/display.phpnvd
- www.securityfocus.com/bid/25388nvd
- www.vupen.com/english/advisories/2007/2935nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/36144nvd
News mentions
0No linked articles in our index yet.