Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-1669

zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with virusdef before 2.0.6399, (2) Spam Firewall before 3.4 20070319 with virusdef before 2.0.6399o, and (3) AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

Published

2007-05-09T00:19:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.8 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

6.9

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Hardware barracuda_networks barracuda_spam_firewall 3.1.17 No
Hardware barracuda_networks barracuda_spam_firewall 3.1.18 No
Hardware barracuda_networks barracuda_spam_firewall 3.3.0.54 No
Hardware barracuda_networks barracuda_spam_firewall 3.3.01.001 No
Hardware barracuda_networks barracuda_spam_firewall 3.3.3 No
Hardware barracuda_networks barracuda_spam_firewall 3.3.03.053 No
Hardware barracuda_networks barracuda_spam_firewall 3.3.03.055 No
Hardware barracuda_networks barracuda_spam_firewall 3.3.15.026 No
Hardware barracuda_networks barracuda_spam_firewall 3.4 No
Application amavis amavis ≤ 2.4.1 Yes
References