7.8
CVSSv2

CVE-2007-1669

Published: 09/05/2007 Updated: 16/10/2018
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
VMScore: 785
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with virusdef prior to 2.0.6399, (2) Spam Firewall prior to 3.4 20070319 with virusdef prior to 2.0.6399o, and (3) AMaViS 2.4.1 and previous versions, allows remote malicious users to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

amavis amavis

Exploits

/* Exploit for the vulnerability: Multiple vendors ZOO file decompression infinite loop DoS coded by Jean-Sébastien Guay-Leroux September 2006 */ #include <stdioh> #include <stdlibh> #include <stringh> // Structure of a ZOO header #define ZOO_HEADER_SIZE 0x0000002a #define ZH_TEXT 0 #define ZH_ ...