CVE-2007-1673 - CVE House
Back to Database
Status published High CVE-2007-1673

unzoo.c, as used in multiple products including AMaViS 2.4.1 and...

Vulnerability Description

unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-1673

Credits & Attribution

No credits recorded in the NVD database.

References

More from amavis

View All →
CVE-2007-2026
The gnu regular expression code in file 4.20 allows context-dependent...
High 7.8
CVE-2007-1669
zoo decoder 2.10 (zoo-2.10), as used in multiple products including...
High 7.8
CVE-2002-1109
securetar, as used in AMaViS shell script 0.2.1 and earlier,...
Low 2.1
CVE-1999-1512
The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers...
Critical 10

Affected Vendor

Affected Software

amavis, avast antivirus, avast antivirus home, avast antivirus professional, antivir, antivir personal, panda antivirus, panda antivirus and firewall, picozip, zoo, unzoo, winace, barracuda spam firewall
Vulnerable Versions:
0, 4.6.394, 4.7.652, 4.7.700, 4.0, 4.6, 4.6.652, 4.6.655, 4.6.665, 4.6.691, 4.7.827, 4.7.844, 4.7.869, 4.7.1043, 4.7.1098, 4.6.603, 6.35.00.00, 7.04.00.23, 7, 2007, 4.4, model_100, model_200, model_300, model_400, model_500, model_600, model_800, model_900

Timeline

Official Publish: May 9th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.