CVE-2007-3873: Stack-based buffer overflow in vstlib32.dll 1.2.0.1012 in the SSAPI Engine 5.0.0.1066 through 5.2.0.1012 in Tr

Routine

MEDIUM 6.9DOWNGRADEDOWNGRADE

CVE-2007-3873 is a medium-severity flaw (CVSS 6.9) affecting antispyware, pc-cillin internet security 2007. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Stack-based buffer overflow in vstlib32.dll 1.2.0.1012 in the SSAPI Engine 5.0.0.1066 through 5.2.0.1012 in Trend Micro AntiSpyware 3.5 and PC-Cillin Internet Security 2007 15.0 through 15.3, when the Venus Spy Trap (VST) feature is enabled, allows local users to cause a denial of service (service crash) or execute arbitrary code via a file with a long pathname, which triggers the overflow during a ReadDirectoryChangesW callback notification.

Why this priority

No elevated risk signals yet

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	6.9 (Medium)
EPSS exploit chance	0.4% (top 63%)
CISA exploited list	No
Published	2007-08-22
Last modified	2026-06-16

Publisher (CNA): MITRE · Vendor: trend micro

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2007-08-22 23:17 UTCPublished CVE record published
2026-06-16 22:42 UTCUpdated Record last modified

trend micro antispyware DOWNGRADE

Affected: 3.5

Fixed in: no fixed release known

Safe to downgrade to: a release before 3.5

1. Check installed version

apt-cache policy antispyware || rpm -q antispyware || antispyware --version

2. No fixed release: DOWNGRADE to a release before 3.5 (Debian / Ubuntu)

apt-cache madison antispyware sudo apt install antispyware=<VERSION_BEFORE_3.5> sudo apt-mark hold antispyware

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list antispyware sudo dnf downgrade antispyware-<VERSION_BEFORE_3.5> sudo dnf versionlock add antispyware

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

trend micro pc-cillin internet security 2007 DOWNGRADE

Affected: 15.0 · 15.2 · 15.2_patch · 15.3

Fixed in: no fixed release known

Safe to downgrade to: a release before 15.0

1. Check installed version

apt-cache policy pc-cillin-internet-security-2007 || rpm -q pc-cillin-internet-security-2007 || pc-cillin-internet-security-2007 --version

2. No fixed release: DOWNGRADE to a release before 15.0 (Debian / Ubuntu)

apt-cache madison pc-cillin-internet-security-2007 sudo apt install pc-cillin-internet-security-2007=<VERSION_BEFORE_15.0> sudo apt-mark hold pc-cillin-internet-security-2007

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list pc-cillin-internet-security-2007 sudo dnf downgrade pc-cillin-internet-security-2007-<VERSION_BEFORE_15.0> sudo dnf versionlock add pc-cillin-internet-security-2007

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2007-3873?

antispyware: downgrade or apply the listed mitigation; pc-cillin internet security 2007: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2007-3873 being exploited?

CVE-2007-3873 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2007-3873 affect?

CVE-2007-3873 affects antispyware, pc-cillin internet security 2007. Severity is medium (CVSS 6.9). Stack-based buffer overflow in vstlib32.dll 1.2.0.1012 in the SSAPI Engine 5.0.0.1066 through 5.2.0.1012 in Trend Micro AntiSpyware 3.5 and PC-Cillin Internet Security 2007 15.0 through 15.3, when the Venus Spy Trap (VST) feature is enabled

How urgent is CVE-2007-3873?

Priority 33/100. No elevated risk signals yet.

Software pages

Trend Micro vulnerabilities

Related CVEs

CVE-2006-3961 MEDIUM 6.8 DOWNGRADE DOWNGRADE Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Secur
CVE-2005-2940 HIGH 7.2 DOWNGRADE Unquoted Windows search path vulnerability in Microsoft Antispyware 1.0.509 (Beta 1) might allow local users t
CVE-2005-2935 MEDIUM 4.6 MITIGATE Unquoted Windows search path vulnerability in Microsoft AntiSpyware might allow local users to execute code vi

References

← Back to latest CVEs