CVE-2007-1673
Estado: ModificadaAlta (7.8)—
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
- Puntuación base: 7.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 3.18%
- Percentil entre todas las CVEs puntuadas: 88
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (13)
Amavis — AmavisAvast — Avast AntivirusAvast — Avast Antivirus HomeAvast — Avast Antivirus ProfessionalAvira — AntivirAvira — Antivir PersonalBarracuda Networks — Barracuda Spam FirewallPanda — Panda AntivirusPanda — Panda Antivirus AND FirewallPicozip — PicozipRahul Dhesi — ZOOUnzoo — UnzooWinace — Winace
CWE
- CWE-399
Referencias
- http://osvdb.org/36208
- http://secunia.com/advisories/25315
- http://securityreason.com/securityalert/2680
- http://www.amavis.org/security/asa-2007-2.txt
- http://www.securityfocus.com/archive/1/467646/100/0/threaded
- http://www.securityfocus.com/bid/23823
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34080
- http://osvdb.org/36208
- http://secunia.com/advisories/25315
- http://securityreason.com/securityalert/2680
- http://www.amavis.org/security/asa-2007-2.txt
- http://www.securityfocus.com/archive/1/467646/100/0/threaded
- http://www.securityfocus.com/bid/23823
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34080
JSON original (NVD)
Mostrar
{
"id": "CVE-2007-1673",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2007-05-09T01:19:00.000",
"references": [
{
"url": "http://osvdb.org/36208",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/25315",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://securityreason.com/securityalert/2680",
"source": "cve@mitre.org"
},
{
"url": "http://www.amavis.org/security/asa-2007-2.txt",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/467646/100/0/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/23823",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34080",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/36208",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/25315",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securityreason.com/securityalert/2680",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.amavis.org/security/asa-2007-2.txt",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/467646/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/23823",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34080",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-399"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file."
},
{
"lang": "es",
"value": "El archivo unzoo.c, tal como se utiliza en varios productos, incluyendo AMaViS versión 2.4.1 y anteriores, permite a los atacantes remotos causar una denegación de servicio (bucle infinito) por medio de un archivo ZOO con una estructura direntry que apunta hacia un archivo anterior."
}
],
"lastModified": "2026-06-16T22:38:05.207",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:amavis:amavis:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64AF6FAE-B025-4F70-9F52-C7C12C6F705D",
"versionEndIncluding": "2.4.1"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6AC3BF13-2946-411E-93A5-0C3AF0508C60",
"versionEndIncluding": "4.7.980"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus:4.6.394:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8683D747-C092-4841-AABF-280D7EB771F0"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus:4.7.652:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D393356E-0464-41B6-9D56-2DCFC6900244"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus:4.7.700:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0ED7C89E-E28B-4BE9-952D-86A8D089B41D"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1519A450-8F71-408A-81B8-AA6F337E7A25"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "48872452-2B26-44C4-A9FF-0D9D23AAC95A"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.6.652:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "275D7948-61FB-4415-A9EB-59EEF9757149"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.6.655:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5CCC4081-D877-4DE3-9342-59BCE7C41CE2"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.6.665:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B189DFCB-2307-43B4-8102-BA725CEE0711"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.6.691:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C733E69-33B3-465B-B146-A68C26373E00"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.7.827:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2EF16A3D-BC29-4426-BDF5-F1C6E85228B0"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.7.827:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33A71A2C-36AC-4F36-9D94-AA824F4DE14C"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.7.844:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E02983BB-F027-4967-A230-933299D2D061"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.7.844:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62618C12-3EAC-4434-B2A8-D83612F1A05C"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.7.869:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "238FB2B1-41CF-46DB-8ED7-7F2B6609C27D"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.7.869:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B949535B-9771-4AC6-BBDB-8BB3A789A1FA"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.7.1043:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97FEA351-FFF6-4452-9A2B-A7AAF4D7EE20"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.7.1043:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC6DA89A-BF71-4031-9B51-E5941FDE5E15"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.7.1098:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18837F1C-8ECD-4202-9489-08D63FB28CDB"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.7.1098:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB201D49-EB74-4A5D-B641-86C4429E3EC0"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "231DDF5E-5026-4844-8374-45F0926F8C4F"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8822D55C-FEE7-41B5-A8D5-8D9F514CF815"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.6.603:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B89C0CA4-00DE-4CAD-B554-36C46815A919"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.6.652:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A618B922-80E7-4769-90BA-5FE231DA6B89"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.6.665:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40F19B83-BAD9-4CDC-95C5-6D352F223AA9"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.6.691:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "762B6C23-5ADD-4221-8146-DF9CE95637BB"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.7.827:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F3B1651-DC3E-43B8-A5A4-8BEF7D668EEC"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.7.827:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF2D8C10-01E4-43D7-93EE-342BA7E9C489"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.7.844:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3D0980CA-26A4-468E-82F3-E03953250343"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.7.844:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AAB7888A-E884-4C73-AF10-698C56E080F3"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.7.869:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF5B2325-D8EE-4D1E-8291-740726FC1EF6"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.7.1043:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB0EF168-1F0D-4772-8922-0A75CAF28661"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.7.1043:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F7F2957-4422-4891-B573-F68882D7C8E1"
},
{
"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.7.1098:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5CAED694-2497-488B-A2AB-0781501678F4"
},
{
"criteria": "cpe:2.3:a:avira:antivir:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FDD00670-7EC0-4AA4-98EF-C8AE38330284"
},
{
"criteria": "cpe:2.3:a:avira:antivir:6.35.00.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C23C179C-B50E-4F47-BFFA-85848131C99D"
},
{
"criteria": "cpe:2.3:a:avira:antivir:7.04.00.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C813AD8-5D73-41DF-B710-3CEB20FB9EF2"
},
{
"criteria": "cpe:2.3:a:avira:antivir_personal:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B38A75AF-D8B4-4B54-87E9-6EED562CAAC1"
},
{
"criteria": "cpe:2.3:a:avira:antivir_personal:*:*:classic:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5DB520B5-36E8-4F4B-99FF-0FF3F708CC8A"
},
{
"criteria": "cpe:2.3:a:avira:antivir_personal:*:*:premium:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BECD1C6B-EC0F-4203-BA12-F8B02472FF4C"
},
{
"criteria": "cpe:2.3:a:avira:antivir_personal:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD267D52-D580-4460-AFF9-E5BA478A98FA",
"versionEndIncluding": "7.3.0.5"
},
{
"criteria": "cpe:2.3:a:avira:antivir_personal:7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64D94528-A54F-439B-8584-57A82CDF7318"
},
{
"criteria": "cpe:2.3:a:avira:antivir_personal:7:*:classic:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB66A5A4-6758-438D-9155-7475A5406DA5"
},
{
"criteria": "cpe:2.3:a:panda:panda_antivirus:2007:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A9F9AF4F-E974-4D6F-AF51-0DA7A59E64FD"
},
{
"criteria": "cpe:2.3:a:panda:panda_antivirus_and_firewall:2007:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4DBEED1-0648-45F3-AFC2-91C872A1B098"
},
{
"criteria": "cpe:2.3:a:picozip:picozip:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6AD36471-D8DC-4B11-B53B-264AB1560063"
},
{
"criteria": "cpe:2.3:a:rahul_dhesi:zoo:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79845C9F-7884-4F77-B492-4A944D3DCCEA",
"versionEndIncluding": "2.10"
},
{
"criteria": "cpe:2.3:a:unzoo:unzoo:4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B93C2E82-03E5-42CE-A589-B82FBCBE7D52"
},
{
"criteria": "cpe:2.3:a:winace:winace:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF7B6EE8-25D5-4C89-A0B8-A069D330A9D9"
},
{
"criteria": "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D03D666-D234-4626-82F9-EC5726BE1920"
},
{
"criteria": "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_100:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0BEEFB2-C6ED-43D5-B535-623931C38890"
},
{
"criteria": "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2ECF7F8-A29F-4868-9DE5-4227E5DA2285"
},
{
"criteria": "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_300:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A897043-9003-4F27-8C7D-AE6B2BD0389C"
},
{
"criteria": "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_400:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F05FEF8-6B34-4874-AD6B-A053415BD939"
},
{
"criteria": "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_500:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D28FAD61-3723-4CCC-B890-C5869E7AC3EB"
},
{
"criteria": "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_600:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7697AAC2-EC8A-496E-9336-29AAE61CD69E"
},
{
"criteria": "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BAA47F3A-44BA-4011-8A44-1AE54D02E772"
},
{
"criteria": "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:model_900:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "423620AD-EA6A-4730-B97A-DF67247372BE"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org",
"evaluatorSolution": "http://xforce.iss.net/xforce/xfdb/34080\r\n\r\n\r\nFor Barracuda Spam Firewall:\r\nUpgrade to the latest virus definition version of Barracuda Spam Firewall (virusdef 2.0.6399 for 3.4 and after or virusdef 2.0.6399o for prior to 3.4), available from the automatic update.\r\n\r\nFor Panda Software Antivirus:\r\nUpgrade to the latest version of Panda Software Antivirus (4/2/2007 or later), available from the automatic update feature.\r\n\r\nFor avast! antivirus:\r\nUpgrade to the latest version of Panda Software Antivirus (4.7.981 or later), available from the avast! antivirus Web site. See references.\r\n\r\nFor Avira AntiVir:\r\nUpgrade to the latest version of Avira AntiVir (avpack32.dll version 7.3.0.6 or later), available from the automatic update feature.\r\n\r\nFor AMaViS:\r\nRefer to ASA-2007-2 for patch, upgrade, or suggested workaround information. See References."
}