Unscored severity · published May 9, 2007
CVE-2007-1669
zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with virusdef before 2.0.6399, (2) Spam Firewall before 3.4 20070319…
–
CVSS
12.2%
EPSS
No
On KEV
Description
zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with virusdef before 2.0.6399, (2) Spam Firewall before 3.4 20070319 with virusdef before 2.0.6399o, and (3) AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.
Exploitation
Is it being used?
Exploit prediction (EPSS)12.2% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AM
Amavis · Amavis
through 2.4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1669
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1669
Patch
http://secunia.com/advisories/25122
Vendor Advisory
http://secunia.com/advisories/25315
securityreason.com
http://securityreason.com/securityalert/2680
www.amavis.org
http://www.amavis.org/security/asa-2007-2.txt
www.attrition.org
http://www.attrition.org/pipermail/vim/2007-July/001725.html
www.osvdb.org
http://www.osvdb.org/35795
More from Amavis
–
CVE-2007-1673
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry…