CVE-2007-1673: High severity Amavis AMaViS vulnerability

Q: What is the severity of CVE-2007-1673?

CVE-2007-1673 is classified as a moderate severity vulnerability that can cause a denial of service through an infinite loop.

Q: How do I fix CVE-2007-1673?

To fix CVE-2007-1673, update the affected software to versions that are beyond those specified in the vulnerability description.

Q: Which software is affected by CVE-2007-1673?

CVE-2007-1673 affects AMaViS 2.4.1 and earlier, certain versions of Avast Antivirus, and several other antivirus products.

Q: What kinds of attacks can exploit CVE-2007-1673?

An attacker can exploit CVE-2007-1673 by using a specially crafted ZOO archive that creates an infinite loop in the vulnerable software.

Q: What are the consequences of CVE-2007-1673 being exploited?

Exploiting CVE-2007-1673 can lead to a denial of service, causing the affected application to become unresponsive.

Published May 9, 2007

Updated

unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

Affected Software

59 affected components

Amavis AMaViS<=2.4.1

Avast Avast Antivirus<=4.7.980

Avast Avast Antivirus=4.6.394

Avast Avast Antivirus=4.7.652

Avast Avast Antivirus=4.7.700

Avast Avast Antivirus Home=4.0

Avast Avast Antivirus Home=4.6

Avast Avast Antivirus Home=4.6.652

Avast Avast Antivirus Home=4.6.655

Avast Avast Antivirus Home=4.6.665

Avast Avast Antivirus Home=4.6.691

Avast Avast Antivirus Home=4.7.827

Avast Avast Antivirus Home=4.7.844

Avast Avast Antivirus Home=4.7.869

Avast Avast Antivirus Home=4.7.1043

Avast Avast Antivirus Home=4.7.1098

Avast Avast Antivirus Professional=4.0

Avast Avast Antivirus Professional=4.6

Avast Avast Antivirus Professional=4.6.603

Avast Avast Antivirus Professional=4.6.652

Avast Avast Antivirus Professional=4.6.665

Avast Avast Antivirus Professional=4.6.691

Avast Avast Antivirus Professional=4.7.827

Avast Avast Antivirus Professional=4.7.844

Avast Avast Antivirus Professional=4.7.869

Avast Avast Antivirus Professional=4.7.1043

Avast Avast Antivirus Professional=4.7.1098

Avira Antivir

Avira Antivir=6.35.00.00

Avira Antivir=7.04.00.23

Avira AntiVir Personal

Avira AntiVir Personal<=7.3.0.5

Avira AntiVir Personal=7

Panda Panda Antivirus=2007

Panda Panda Antivirus And Firewall=2007

PicoZip PicoZip

Rahul Dhesi Zoo<=2.10

Unzoo Unzoo=4.4

WinAce WinAce

Barracuda Networks Barracuda Spam Firewall

Barracuda Networks Barracuda Spam Firewall=model_100

Barracuda Networks Barracuda Spam Firewall=model_200

Barracuda Networks Barracuda Spam Firewall=model_300

Barracuda Networks Barracuda Spam Firewall=model_400

Barracuda Networks Barracuda Spam Firewall=model_500

Barracuda Networks Barracuda Spam Firewall=model_600

Barracuda Networks Barracuda Spam Firewall=model_800

Barracuda Networks Barracuda Spam Firewall=model_900

Event History

May 9, 2007

CVE Published

01:19 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1673?

CVE-2007-1673 is classified as a moderate severity vulnerability that can cause a denial of service through an infinite loop.

How do I fix CVE-2007-1673?

To fix CVE-2007-1673, update the affected software to versions that are beyond those specified in the vulnerability description.

Which software is affected by CVE-2007-1673?

CVE-2007-1673 affects AMaViS 2.4.1 and earlier, certain versions of Avast Antivirus, and several other antivirus products.

What kinds of attacks can exploit CVE-2007-1673?

An attacker can exploit CVE-2007-1673 by using a specially crafted ZOO archive that creates an infinite loop in the vulnerable software.

What are the consequences of CVE-2007-1673 being exploited?