Strix
26.1K

CVE-2007-1673

UnknownEPSS 3.18%

Last modified

CVE-2007-1673 is a vulnerability of currently unknown severity. unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.. EPSS estimates a 3.18% chance of exploitation in the next 30 days.

Description

unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

Metrics

EPSS Probability
3.18%

86.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
AmavisAmavis<= 2.4.1
AvastAvast Antivirus<= 4.7.980
AvastAvast Antivirus4.6.394
AvastAvast Antivirus4.7.652
AvastAvast Antivirus4.7.700
AvastAvast Antivirus Home4.0
AvastAvast Antivirus Home4.6
AvastAvast Antivirus Home4.6.652
AvastAvast Antivirus Home4.6.655
AvastAvast Antivirus Home4.6.665
AvastAvast Antivirus Home4.6.691
AvastAvast Antivirus Home4.7.827
AvastAvast Antivirus Home4.7.844
AvastAvast Antivirus Home4.7.869
AvastAvast Antivirus Home4.7.1043
AvastAvast Antivirus Home4.7.1098
AvastAvast Antivirus Professional4.0
AvastAvast Antivirus Professional4.6
AvastAvast Antivirus Professional4.6.603
AvastAvast Antivirus Professional4.6.652
AvastAvast Antivirus Professional4.6.665
AvastAvast Antivirus Professional4.6.691
AvastAvast Antivirus Professional4.7.827
AvastAvast Antivirus Professional4.7.844
AvastAvast Antivirus Professional4.7.869
AvastAvast Antivirus Professional4.7.1043
AvastAvast Antivirus Professional4.7.1098
AviraAntivirAll versions
AviraAntivir6.35.00.00
AviraAntivir7.04.00.23
AviraAntivir PersonalAll versions
AviraAntivir Personal<= 7.3.0.5
AviraAntivir Personal7
PandaPanda Antivirus2007
PandaPanda Antivirus And Firewall2007
PicozipPicozipAll versions
Rahul DhesiZoo<= 2.10
UnzooUnzoo4.4
WinaceWinaceAll versions
Barracuda NetworksBarracuda Spam FirewallAll versions
Barracuda NetworksBarracuda Spam Firewallmodel_100
Barracuda NetworksBarracuda Spam Firewallmodel_200
Barracuda NetworksBarracuda Spam Firewallmodel_300
Barracuda NetworksBarracuda Spam Firewallmodel_400
Barracuda NetworksBarracuda Spam Firewallmodel_500
Barracuda NetworksBarracuda Spam Firewallmodel_600
Barracuda NetworksBarracuda Spam Firewallmodel_800
Barracuda NetworksBarracuda Spam Firewallmodel_900

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2007-1673?
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.
How severe is CVE-2007-1673?
Severity scoring for CVE-2007-1673 is pending analysis. The EPSS model estimates a 3.18% probability of exploitation in the next 30 days.
How do I fix CVE-2007-1673?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2007-1673?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST