Evil-DB LogoEvil-DB
← All CVEs

CVE-2007-1669

high · 7.8

zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with virusdef before 2.0.6399, (2) Spam Firewall before 3.4 20070319 with virusdef before 2.0.6399o, and (3) AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

7.8
CVSS
12.2%
EPSS (exploit prob.)
96th
EPSS percentile
2007-05-09
Published

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

VendorProductAffected versions
barracuda_networksbarracuda_spam_firewall3.1.17
barracuda_networksbarracuda_spam_firewall3.1.18
barracuda_networksbarracuda_spam_firewall3.3.0.54
barracuda_networksbarracuda_spam_firewall3.3.01.001
barracuda_networksbarracuda_spam_firewall3.3.3
barracuda_networksbarracuda_spam_firewall3.3.03.053
barracuda_networksbarracuda_spam_firewall3.3.03.055
barracuda_networksbarracuda_spam_firewall3.3.15.026
barracuda_networksbarracuda_spam_firewall3.4
amavisamavis<= 2.4.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-1669