Published: 09/05/2007 Updated: 16/10/2018

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

unzoo.c, as used in multiple products including AMaViS 2.4.1 and previous versions, allows remote malicious users to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
panda panda antivirus 2007
barracuda networks barracuda spam firewall model_200
barracuda networks barracuda spam firewall model_300
barracuda networks barracuda spam firewall model_400
avira antivir
avira antivir personal
avast avast antivirus 4.6.394
avast avast antivirus 4.7.652
avast avast antivirus home 4.6.691
avast avast antivirus home 4.7.1043
avast avast antivirus home 4.7.844
avast avast antivirus home 4.7.869
avast avast antivirus professional 4.6.691
avast avast antivirus professional 4.7.1043
picozip picozip
panda panda antivirus and firewall 2007
unzoo unzoo 4.4
barracuda networks barracuda spam firewall model_500
barracuda networks barracuda spam firewall model_600
avast avast antivirus 4.7.700
avast avast antivirus
avast avast antivirus home 4.7.1098
avast avast antivirus professional 4.0
avast avast antivirus professional 4.7.1098
barracuda networks barracuda spam firewall
barracuda networks barracuda spam firewall model_100
avira antivir 6.35.00.00
avira antivir 7.04.00.23
avira antivir personal 7
amavis amavis
avast avast antivirus home 4.6.652
avast avast antivirus home 4.6.655
avast avast antivirus home 4.6.665
avast avast antivirus home 4.7.827
avast avast antivirus professional 4.6.652
avast avast antivirus professional 4.6.665
avast avast antivirus professional 4.7.844
avast avast antivirus professional 4.7.869
rahul dhesi zoo
winace winace
barracuda networks barracuda spam firewall model_800
barracuda networks barracuda spam firewall model_900
avast avast antivirus home 4.0
avast avast antivirus home 4.6
avast avast antivirus professional 4.6
avast avast antivirus professional 4.6.603
avast avast antivirus professional 4.7.827

Debian Bug report logs - #424686 CVE-2007-1673: denial of service (infinite loop) in zoo and unzoo Package: zoo; Maintainer for zoo is Debian QA Group <packages@qadebianorg>; Source for zoo is src:zoo (PTS, buildd, popcon) Reported by: Stefan Fritsch <sf@sfritschde> Date: Wed, 16 May 2007 19:18:01 UTC Severity: g ...

CWE-399 http://www.securityfocus.com/bid/23823 http://www.amavis.org/security/asa-2007-2.txt http://secunia.com/advisories/25315 http://securityreason.com/securityalert/2680 http://osvdb.org/36208 https://exchange.xforce.ibmcloud.com/vulnerabilities/34080 http://www.securityfocus.com/archive/1/467646/100/0/threaded https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=424686 https://nvd.nist.gov

CVE-2007-1673

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect