high7.8
CVE-2007-1673
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archiv…
Impact
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amavis | Amavis | through 2.4.1 |
| Avast | Avast Antivirus | through 4.7.980 Versions 4.6.394, 4.7.652, 4.7.700 |
| Avast | Avast Antivirus Home | Versions 4.0, 4.6, 4.6.652, 4.6.655, 4.6.665, 4.6.691 |
| Avast | Avast Antivirus Professional | Versions 4.0, 4.6, 4.6.603, 4.6.652, 4.6.665, 4.6.691 |
| Avira | Antivir | All versions Versions 6.35.00.00, 7.04.00.23 |
| Avira | Antivir Personal | All versions through 7.3.0.5 Version 7 |
| Panda | Panda Antivirus | Version 2007 |
| Panda | Panda Antivirus And Firewall | Version 2007 |
| Picozip | Picozip | All versions |
| Rahul Dhesi | Zoo | through 2.10 |
| Unzoo | Unzoo | Version 4.4 |
| Winace | Winace | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/36208
- http://secunia.com/advisories/25315
- http://securityreason.com/securityalert/2680
- http://www.amavis.org/security/asa-2007-2.txt
- http://www.securityfocus.com/archive/1/467646/100/0/threaded
- http://www.securityfocus.com/bid/23823
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34080
- http://osvdb.org/36208
- http://secunia.com/advisories/25315
- http://securityreason.com/securityalert/2680
- http://www.amavis.org/security/asa-2007-2.txt
- http://www.securityfocus.com/archive/1/467646/100/0/threaded
- http://www.securityfocus.com/bid/23823
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34080