CVE-2007-1673
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers...
CVE-2007-1673 is a high vulnerability (CVSS 7.8) in Amavis, published May 9, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.18%, the 88th percentile. No source names a fixed version.
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.
Exploit likelihood
What each source reports
NVD Score used
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.
- Record
CVE-2007-1673- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.
- Record
CVE-2007-1673- Updated
- 2026-11-02
EUVDEUVD-2007-1667 No score
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.
- Record
EUVD-2007-1667- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2j49-3cqv-33p2 No score
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers...
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.
- Record
GHSA-2j49-3cqv-33p2- Updated
- 2026-11-02
Affected products
- amavis
- rahul dhesi zoo
- unzoo
- avast antivirus
- avast antivirus home
- avast antivirus professional
- avira antivir
- avira antivir personal
- barracuda networks spam firewall
- panda antivirus
- panda antivirus and firewall
- picozip
Show 1 moreShow less
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
amavis.org/security/asa-2007-2.txt
exchange.xforce.ibmcloud.com/vulnerabilities/34080
osvdb.org/36208
securityfocus.com/bid/23823
secunia.com/advisories/25315
securityreason.com/securityalert/2680
nvd.nist.gov/vuln/detail/CVE-2007-1673
github.com/advisories/GHSA-2j49-3cqv-33p2