CVE-2007-1670

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-05-09 · updated 2026-06-16

Description

Panda Software Antivirus before 20070402 allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

Affected products

Panda Activescan: 5.0, 5.53.00, 5.54.1
Panda Antivirus: 2.0
Panda Platinum 2006 Internet Security: all versions
Panda Platinum 2007 Internet Security: all versions
Panda Titanium 2005 Antivirus: all versions
Panda Titanium 2006 Antivirus + Antispyware: all versions

References

http://osvdb.org/35845
http://secunia.com/advisories/25152
http://www.securityfocus.com/archive/1/467646/100/0/threaded
http://www.securityfocus.com/bid/23823
http://www.vupen.com/english/advisories/2007/1700
https://exchange.xforce.ibmcloud.com/vulnerabilities/34080
http://osvdb.org/35845
http://secunia.com/advisories/25152
http://www.securityfocus.com/archive/1/467646/100/0/threaded
http://www.securityfocus.com/bid/23823
http://www.vupen.com/english/advisories/2007/1700
https://exchange.xforce.ibmcloud.com/vulnerabilities/34080

Get alerted when CVE-2007-1670 or the next vulnerability affects your stack