{"schemaVersion":3,"id":"CVE-2007-1673","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.","dates":{"published":"2007-05-09T01:00:00.000Z","modified":"2024-08-07T13:06:25.976Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.8,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.8,"severity":"high","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.03178,"percentile":0.87874,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.03178},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03178,"percentile":0.87874}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03178,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03178,"percentile":0.87874}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_BB3EB90CE2682619","name":"Exploit Reference (securityfocus.com)","source":"reference","url":"http://www.securityfocus.com/bid/23823","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-399","name":"Resource Management Errors","description":"Weaknesses in this category are related to improper management of system resources.","type":"category","status":"Draft","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/399.html"}],"affected":[{"vendor":"amavis","product":"amavis","name":"amavis","label":"amavis","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.4.1","eol":null,"hubHref":"/vendor/amavis/amavis"},{"vendor":"avast","product":"avast_antivirus","name":"avast antivirus","label":"avast_antivirus","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 4.7.980","noFixRecorded":false,"fixedIn":null},{"text":"4.6.394","noFixRecorded":false,"fixedIn":null},{"text":"4.7.652","noFixRecorded":false,"fixedIn":null},{"text":"4.7.700","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 4.7.980 | 4.6.394 | 4.7.652 | 4.7.700","eol":null,"hubHref":"/vendor/avast/avast_antivirus"},{"vendor":"avast","product":"avast_antivirus_home","name":"avast antivirus home","label":"avast_antivirus_home","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.0","noFixRecorded":false,"fixedIn":null},{"text":"4.6","noFixRecorded":false,"fixedIn":null},{"text":"4.6.652","noFixRecorded":false,"fixedIn":null},{"text":"4.6.655","noFixRecorded":false,"fixedIn":null},{"text":"4.6.665","noFixRecorded":false,"fixedIn":null},{"text":"4.6.691","noFixRecorded":false,"fixedIn":null},{"text":"4.7.827","noFixRecorded":false,"fixedIn":null},{"text":"4.7.844","noFixRecorded":false,"fixedIn":null},{"text":"4.7.869","noFixRecorded":false,"fixedIn":null},{"text":"4.7.1043","noFixRecorded":false,"fixedIn":null},{"text":"4.7.1098","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.0 | 4.6 | 4.6.652 | 4.6.655 | 4.6.665 | 4.6.691 | 4.7.827 | 4.7.844 | 4.7.869 | 4.7.1043 | 4.7.1098","eol":null,"hubHref":"/vendor/avast/avast_antivirus_home"},{"vendor":"avast","product":"avast_antivirus_professional","name":"avast antivirus professional","label":"avast_antivirus_professional","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.0","noFixRecorded":false,"fixedIn":null},{"text":"4.6","noFixRecorded":false,"fixedIn":null},{"text":"4.6.603","noFixRecorded":false,"fixedIn":null},{"text":"4.6.652","noFixRecorded":false,"fixedIn":null},{"text":"4.6.665","noFixRecorded":false,"fixedIn":null},{"text":"4.6.691","noFixRecorded":false,"fixedIn":null},{"text":"4.7.827","noFixRecorded":false,"fixedIn":null},{"text":"4.7.844","noFixRecorded":false,"fixedIn":null},{"text":"4.7.869","noFixRecorded":false,"fixedIn":null},{"text":"4.7.1043","noFixRecorded":false,"fixedIn":null},{"text":"4.7.1098","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.0 | 4.6 | 4.6.603 | 4.6.652 | 4.6.665 | 4.6.691 | 4.7.827 | 4.7.844 | 4.7.869 | 4.7.1043 | 4.7.1098","eol":null,"hubHref":"/vendor/avast/avast_antivirus_professional"},{"vendor":"avira","product":"antivir","name":"antivir","label":"antivir","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"6.35.00.00","noFixRecorded":false,"fixedIn":null},{"text":"7.04.00.23","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.35.00.00 | 7.04.00.23","eol":null,"hubHref":"/vendor/avira/antivir"},{"vendor":"avira","product":"antivir_personal","name":"antivir personal","label":"antivir_personal","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 7.3.0.5","noFixRecorded":false,"fixedIn":null},{"text":"7","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 7.3.0.5 | 7","eol":null,"hubHref":"/vendor/avira/antivir_personal"},{"vendor":"barracuda_networks","product":"barracuda_spam_firewall","name":"barracuda spam firewall","label":"barracuda_spam_firewall","ecosystem":null,"cpePart":"h","purl":null,"purlType":null,"versions":[{"text":"model_100","noFixRecorded":false,"fixedIn":null},{"text":"model_200","noFixRecorded":false,"fixedIn":null},{"text":"model_300","noFixRecorded":false,"fixedIn":null},{"text":"model_400","noFixRecorded":false,"fixedIn":null},{"text":"model_500","noFixRecorded":false,"fixedIn":null},{"text":"model_600","noFixRecorded":false,"fixedIn":null},{"text":"model_800","noFixRecorded":false,"fixedIn":null},{"text":"model_900","noFixRecorded":false,"fixedIn":null}],"versionsText":"model_100 | model_200 | model_300 | model_400 | model_500 | model_600 | model_800 | model_900","eol":null,"hubHref":"/vendor/barracuda_networks/barracuda_spam_firewall"},{"vendor":"panda","product":"panda_antivirus","name":"panda antivirus","label":"panda_antivirus","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2007","noFixRecorded":false,"fixedIn":null}],"versionsText":"2007","eol":null,"hubHref":"/vendor/panda/panda_antivirus"},{"vendor":"panda","product":"panda_antivirus_and_firewall","name":"panda antivirus and firewall","label":"panda_antivirus_and_firewall","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2007","noFixRecorded":false,"fixedIn":null}],"versionsText":"2007","eol":null,"hubHref":"/vendor/panda/panda_antivirus_and_firewall"},{"vendor":"rahul_dhesi","product":"zoo","name":"zoo","label":"zoo","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.10","eol":null,"hubHref":"/vendor/rahul_dhesi/zoo"},{"vendor":"unzoo","product":"unzoo","name":"unzoo","label":"unzoo","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.4","eol":null,"hubHref":"/vendor/unzoo/unzoo"}],"affectedCount":11,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.amavis.org/security/asa-2007-2.txt","label":"www.amavis.org/security/asa-2007-2.txt","hostname":"www.amavis.org","tags":["X Refsource CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34080","label":"exchange.xforce.ibmcloud.com/vulnerabilities/34080","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://osvdb.org/36208","label":"osvdb.org/36208","hostname":"osvdb.org","tags":["VDB Entry","X Refsource OSVDB"]},{"url":"http://www.securityfocus.com/bid/23823","label":"www.securityfocus.com/bid/23823","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Exploit"]},{"url":"http://secunia.com/advisories/25315","label":"secunia.com/advisories/25315","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/467646/100/0/threaded","label":"www.securityfocus.com/archive/1/467646/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://securityreason.com/securityalert/2680","label":"securityreason.com/securityalert/2680","hostname":"securityreason.com","tags":["Third Party Advisory","X Refsource SREASON"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2007-05-09T01:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T13:06:25.976Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":42,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T08:23:18.023Z","stale":false,"partial":false}}