What’s Vulnerable › Vulnerabilities

CVE-2007-1673

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2007-05-09 · updated 2026-06-16
• Weakness: CWE-399

Description

unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

Affected products

• Amavis: through 2.4.1
• Avast Antivirus: through 4.7.980; 4.6.394, 4.7.652, 4.7.700
• Avast Antivirus Home: 4.0, 4.6, 4.6.652, 4.6.655, 4.6.665, 4.6.691 (+5)
• Avast Antivirus Professional: 4.0, 4.6, 4.6.603, 4.6.652, 4.6.665, 4.6.691 (+5)
• AVIRA Antivir: 6.35.00.00, 7.04.00.23
• AVIRA Antivir Personal: through 7.3.0.5; 7
• Barracuda Networks Barracuda Spam Firewall: model_100, model_200, model_300, model_400, model_500, model_600 (+2)
• Panda Antivirus: 2007
• Panda Antivirus And Firewall: 2007
• Picozip: all versions
• Rahul Dhesi Zoo: through 2.10
• Unzoo: 4.4
• Winace: all versions

References

• http://osvdb.org/36208
• http://secunia.com/advisories/25315
• http://securityreason.com/securityalert/2680
• http://www.amavis.org/security/asa-2007-2.txt
• http://www.securityfocus.com/archive/1/467646/100/0/threaded
• http://www.securityfocus.com/bid/23823
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34080
• http://osvdb.org/36208
• http://secunia.com/advisories/25315
• http://securityreason.com/securityalert/2680
• http://www.amavis.org/security/asa-2007-2.txt
• http://www.securityfocus.com/archive/1/467646/100/0/threaded

Get alerted when CVE-2007-1673 or the next vulnerability affects your stack