CVE-2007-1673

unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

Affected Software

Name	Vendor	Start Version	End Version
Amavis	Amavis	*	2.4.1 (including)
Avast_antivirus	Avast	*	4.7.980 (including)
Avast_antivirus	Avast	4.6.394 (including)	4.6.394 (including)
Avast_antivirus	Avast	4.7.652 (including)	4.7.652 (including)
Avast_antivirus	Avast	4.7.700 (including)	4.7.700 (including)
Avast_antivirus_home	Avast	4.0 (including)	4.0 (including)
Avast_antivirus_home	Avast	4.6 (including)	4.6 (including)
Avast_antivirus_home	Avast	4.6.652 (including)	4.6.652 (including)
Avast_antivirus_home	Avast	4.6.655 (including)	4.6.655 (including)
Avast_antivirus_home	Avast	4.6.665 (including)	4.6.665 (including)
Avast_antivirus_home	Avast	4.6.691 (including)	4.6.691 (including)
Avast_antivirus_home	Avast	4.7.827 (including)	4.7.827 (including)
Avast_antivirus_home	Avast	4.7.844 (including)	4.7.844 (including)
Avast_antivirus_home	Avast	4.7.869 (including)	4.7.869 (including)
Avast_antivirus_home	Avast	4.7.1043 (including)	4.7.1043 (including)
Avast_antivirus_home	Avast	4.7.1098 (including)	4.7.1098 (including)
Avast_antivirus_professional	Avast	4.0 (including)	4.0 (including)
Avast_antivirus_professional	Avast	4.6 (including)	4.6 (including)
Avast_antivirus_professional	Avast	4.6.603 (including)	4.6.603 (including)
Avast_antivirus_professional	Avast	4.6.652 (including)	4.6.652 (including)
Avast_antivirus_professional	Avast	4.6.665 (including)	4.6.665 (including)
Avast_antivirus_professional	Avast	4.6.691 (including)	4.6.691 (including)
Avast_antivirus_professional	Avast	4.7.827 (including)	4.7.827 (including)
Avast_antivirus_professional	Avast	4.7.844 (including)	4.7.844 (including)
Avast_antivirus_professional	Avast	4.7.869 (including)	4.7.869 (including)
Avast_antivirus_professional	Avast	4.7.1043 (including)	4.7.1043 (including)
Avast_antivirus_professional	Avast	4.7.1098 (including)	4.7.1098 (including)
Antivir	Avira	*	*
Antivir	Avira	6.35.00.00 (including)	6.35.00.00 (including)
Antivir	Avira	7.04.00.23 (including)	7.04.00.23 (including)
Antivir_personal	Avira	*	*
Antivir_personal	Avira	*	7.3.0.5 (including)
Antivir_personal	Avira	7 (including)	7 (including)
Panda_antivirus	Panda	2007 (including)	2007 (including)
Panda_antivirus_and_firewall	Panda	2007 (including)	2007 (including)
Picozip	Picozip	*	*
Zoo	Rahul_dhesi	*	2.10 (including)
Unzoo	Unzoo	4.4 (including)	4.4 (including)
Winace	Winace	*	*
Barracuda_spam_firewall	Barracuda_networks	*	*
Barracuda_spam_firewall	Barracuda_networks	model_100 (including)	model_100 (including)
Barracuda_spam_firewall	Barracuda_networks	model_200 (including)	model_200 (including)
Barracuda_spam_firewall	Barracuda_networks	model_300 (including)	model_300 (including)
Barracuda_spam_firewall	Barracuda_networks	model_400 (including)	model_400 (including)
Barracuda_spam_firewall	Barracuda_networks	model_500 (including)	model_500 (including)
Barracuda_spam_firewall	Barracuda_networks	model_600 (including)	model_600 (including)
Barracuda_spam_firewall	Barracuda_networks	model_800 (including)	model_800 (including)
Barracuda_spam_firewall	Barracuda_networks	model_900 (including)	model_900 (including)
Unzoo	Ubuntu	dapper	*
Unzoo	Ubuntu	edgy	*
Unzoo	Ubuntu	feisty	*
Unzoo	Ubuntu	gutsy	*
Unzoo	Ubuntu	hardy	*
Zoo	Ubuntu	dapper	*
Zoo	Ubuntu	devel	*
Zoo	Ubuntu	edgy	*
Zoo	Ubuntu	feisty	*
Zoo	Ubuntu	gutsy	*
Zoo	Ubuntu	hardy	*
Zoo	Ubuntu	intrepid	*
Zoo	Ubuntu	jaunty	*
Zoo	Ubuntu	karmic	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2007-1673
CWE	https://cwe.mitre.org/data/definitions/399.html

Affected Software

References