1. CVE-Search
  2. CVE-2007-1673
ID CVE-2007-1673
Summary unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file. http://xforce.iss.net/xforce/xfdb/34080 For Barracuda Spam Firewall: Upgrade to the latest virus definition version of Barracuda Spam Firewall (virusdef 2.0.6399 for 3.4 and after or virusdef 2.0.6399o for prior to 3.4), available from the automatic update. For Panda Software Antivirus: Upgrade to the latest version of Panda Software Antivirus (4/2/2007 or later), available from the automatic update feature. For avast! antivirus: Upgrade to the latest version of Panda Software Antivirus (4.7.981 or later), available from the avast! antivirus Web site. See references. For Avira AntiVir: Upgrade to the latest version of Avira AntiVir (avpack32.dll version 7.3.0.6 or later), available from the automatic update feature. For AMaViS: Refer to ASA-2007-2 for patch, upgrade, or suggested workaround information. See References.
References
Vulnerable Configurations
  • cpe:2.3:a:amavis:amavis:*:*:*:*:*:*:*:*
    cpe:2.3:a:amavis:amavis:*:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus:4.6.394:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus:4.6.394:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus:4.7.652:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus:4.7.652:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus:4.7.700:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus:4.7.700:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus:*:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus:*:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_home:4.0:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_home:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_home:4.6:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_home:4.6:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_home:4.6.652:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_home:4.6.652:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_home:4.6.655:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_home:4.6.655:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_home:4.6.665:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_home:4.6.665:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_home:4.6.691:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_home:4.6.691:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_home:4.7.827:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_home:4.7.827:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_home:4.7.827:*:windows:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_home:4.7.827:*:windows:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_home:4.7.844:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_home:4.7.844:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_home:4.7.844:*:windows:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_home:4.7.844:*:windows:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_home:4.7.869:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_home:4.7.869:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_home:4.7.869:*:windows:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_home:4.7.869:*:windows:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_home:4.7.1043:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_home:4.7.1043:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_home:4.7.1043:*:windows:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_home:4.7.1043:*:windows:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_home:4.7.1098:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_home:4.7.1098:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_home:4.7.1098:*:windows:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_home:4.7.1098:*:windows:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_professional:4.0:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_professional:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_professional:4.6:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_professional:4.6:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_professional:4.6.603:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_professional:4.6.603:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_professional:4.6.652:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_professional:4.6.652:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_professional:4.6.665:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_professional:4.6.665:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_professional:4.6.691:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_professional:4.6.691:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_professional:4.7.827:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_professional:4.7.827:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_professional:4.7.827:*:windows:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_professional:4.7.827:*:windows:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_professional:4.7.844:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_professional:4.7.844:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_professional:4.7.844:*:windows:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_professional:4.7.844:*:windows:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_professional:4.7.869:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_professional:4.7.869:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_professional:4.7.1043:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_professional:4.7.1043:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_professional:4.7.1043:*:windows:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_professional:4.7.1043:*:windows:*:*:*:*:*
  • cpe:2.3:a:avast:avast_antivirus_professional:4.7.1098:*:*:*:*:*:*:*
    cpe:2.3:a:avast:avast_antivirus_professional:4.7.1098:*:*:*:*:*:*:*
  • cpe:2.3:a:avira:antivir:*:*:*:*:*:*:*:*
    cpe:2.3:a:avira:antivir:*:*:*:*:*:*:*:*
  • cpe:2.3:a:avira:antivir:6.35.00.00:*:*:*:*:*:*:*
    cpe:2.3:a:avira:antivir:6.35.00.00:*:*:*:*:*:*:*
  • cpe:2.3:a:avira:antivir:7.04.00.23:*:*:*:*:*:*:*
    cpe:2.3:a:avira:antivir:7.04.00.23:*:*:*:*:*:*:*
  • cpe:2.3:a:avira:antivir_personal:*:*:*:*:*:*:*:*
    cpe:2.3:a:avira:antivir_personal:*:*:*:*:*:*:*:*
  • cpe:2.3:a:avira:antivir_personal:*:*:classic:*:*:*:*:*
    cpe:2.3:a:avira:antivir_personal:*:*:classic:*:*:*:*:*
  • cpe:2.3:a:avira:antivir_personal:*:*:premium:*:*:*:*:*
    cpe:2.3:a:avira:antivir_personal:*:*:premium:*:*:*:*:*
  • cpe:2.3:a:avira:antivir_personal:7:*:*:*:*:*:*:*
    cpe:2.3:a:avira:antivir_personal:7:*:*:*:*:*:*:*
  • cpe:2.3:a:avira:antivir_personal:7:*:classic:*:*:*:*:*
    cpe:2.3:a:avira:antivir_personal:7:*:classic:*:*:*:*:*
  • cpe:2.3:a:panda:panda_antivirus:2007:*:*:*:*:*:*:*
    cpe:2.3:a:panda:panda_antivirus:2007:*:*:*:*:*:*:*
  • cpe:2.3:a:panda:panda_antivirus_and_firewall:2007:*:*:*:*:*:*:*
    cpe:2.3:a:panda:panda_antivirus_and_firewall:2007:*:*:*:*:*:*:*
  • cpe:2.3:a:picozip:picozip:*:*:*:*:*:*:*:*
    cpe:2.3:a:picozip:picozip:*:*:*:*:*:*:*:*
  • cpe:2.3:a:rahul_dhesi:zoo:*:*:*:*:*:*:*:*
    cpe:2.3:a:rahul_dhesi:zoo:*:*:*:*:*:*:*:*
  • cpe:2.3:a:unzoo:unzoo:4.4:*:*:*:*:*:*:*
    cpe:2.3:a:unzoo:unzoo:4.4:*:*:*:*:*:*:*
  • cpe:2.3:a:winace:winace:*:*:*:*:*:*:*:*
    cpe:2.3:a:winace:winace:*:*:*:*:*:*:*:*
  • cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:*:*:*:*:*:*:*:*
    cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:*:*:*:*:*:*:*:*
  • cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_100:*:*:*:*:*:*:*
    cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_100:*:*:*:*:*:*:*
  • cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_200:*:*:*:*:*:*:*
    cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_200:*:*:*:*:*:*:*
  • cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_300:*:*:*:*:*:*:*
    cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_300:*:*:*:*:*:*:*
  • cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_400:*:*:*:*:*:*:*
    cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_400:*:*:*:*:*:*:*
  • cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_500:*:*:*:*:*:*:*
    cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_500:*:*:*:*:*:*:*
  • cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_600:*:*:*:*:*:*:*
    cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_600:*:*:*:*:*:*:*
  • cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_800:*:*:*:*:*:*:*
    cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_800:*:*:*:*:*:*:*
  • cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_900:*:*:*:*:*:*:*
    cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_900:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 16-10-2018 - 16:40)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
refmap via4
bid 23823
bugtraq 20070504 Multiple vendors ZOO file decompression infinite loop DoS
confirm http://www.amavis.org/security/asa-2007-2.txt
osvdb 36208
secunia 25315
sreason 2680
xf multiple-vendor-zoo-dos(34080)
Last major update 16-10-2018 - 16:40
Published 09-05-2007 - 01:19
Last modified 16-10-2018 - 16:40
Back to Top