CVEvulnerability
CVE-2007-1669
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-05-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Description
zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with virusdef before 2.0.6399, (2) Spam Firewall before 3.4 20070319 with virusdef before 2.0.6399o, and (3) AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.
Affected configurations
• amavis amavis (<= 2.4.1)
References
- http://secunia.com/advisories/25122 Patch, Vendor Advisory
- http://secunia.com/advisories/25315 Vendor Advisory
- http://securityreason.com/securityalert/2680 securityreason.com
- http://www.amavis.org/security/asa-2007-2.txt www.amavis.org
- http://www.attrition.org/pipermail/vim/2007-July/001725.html www.attrition.org
- http://www.osvdb.org/35795 www.osvdb.org
- http://www.securityfocus.com/archive/1/467646/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23823 Exploit
- http://www.vupen.com/english/advisories/2007/1699 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34080 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/25122 Patch, Vendor Advisory
- http://secunia.com/advisories/25315 Vendor Advisory
- http://securityreason.com/securityalert/2680 securityreason.com
- http://www.amavis.org/security/asa-2007-2.txt www.amavis.org
- http://www.attrition.org/pipermail/vim/2007-July/001725.html www.attrition.org
- http://www.osvdb.org/35795 www.osvdb.org
- http://www.securityfocus.com/archive/1/467646/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23823 Exploit
- http://www.vupen.com/english/advisories/2007/1699 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34080 exchange.xforce.ibmcloud.com