Vulnerabilities > CVE-2007-1673 - Resource Management Errors vulnerability in multiple products

047910
CVSS 7.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
COMPLETE

Summary

unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file. http://xforce.iss.net/xforce/xfdb/34080 For Barracuda Spam Firewall: Upgrade to the latest virus definition version of Barracuda Spam Firewall (virusdef 2.0.6399 for 3.4 and after or virusdef 2.0.6399o for prior to 3.4), available from the automatic update. For Panda Software Antivirus: Upgrade to the latest version of Panda Software Antivirus (4/2/2007 or later), available from the automatic update feature. For avast! antivirus: Upgrade to the latest version of Panda Software Antivirus (4.7.981 or later), available from the avast! antivirus Web site. See references. For Avira AntiVir: Upgrade to the latest version of Avira AntiVir (avpack32.dll version 7.3.0.6 or later), available from the automatic update feature. For AMaViS: Refer to ASA-2007-2 for patch, upgrade, or suggested workaround information. See References.

Vulnerable Configurations

Part Description Count
Application
Amavis
1
Application
Avast
34
Application
Avira
8
Application
Panda
2
Application
Picozip
1
Application
Rahul_Dhesi
1
Application
Unzoo
1
Application
Winace
1
Hardware
Barracuda_Networks
9

Common Weakness Enumeration (CWE)