CVE-2007-1673

HIGH

unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that point...

Affects 13 products across 9 vendors.

CVSS 2.07.8
EPSS3.2%
Percentile88th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no confidentiality impact, no integrity impact.
CWE Weakness Definitions
CWE-399: Resource Management Errors

Broad class covering failures in managing system resources such as memory, file handles, and connections.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2007. A high severity vulnerability affects Amavis systems (CVE-2007-1673). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2007-GLOBAL-335498-H • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2007-1673?
This vulnerability was disclosed in 2007. A high severity vulnerability affects Amavis systems (CVE-2007-1673). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2007-1673?
CVE-2007-1673 has CVSS 7.8 (High). Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C. EPSS: 3.2%.
Is CVE-2007-1673 actively exploited?
No confirmed active exploitation of CVE-2007-1673 as of 2026-09-25.
How do I remediate CVE-2007-1673?
Priority: MEDIUM.
What systems are affected by CVE-2007-1673?
CVE-2007-1673 affects Amavis Amavis; Avast Avast Antivirus Professional, Avast Antivirus, Avast Antivirus Home; Avira Antivir Personal, Antivir; Barracuda Networks Barracuda Spam Firewall; Panda Panda Antivirus, Panda Antivirus And Firewall; Picozip Picozip (plus 3 more products across 3 more vendors).
Vulnerability Details
CVE IDCVE-2007-1673
BSIDBS-2007-GLOBAL-335498-H BreachSpider Global ID
CVSS VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Published2007-05-09
Last Modified2026-06-16
ICS Relevance0%
Weakness (CWE)
Resource Management Errors
SourceNVD
Official Description

unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file. CVSS vector: AV:N/AC:L/Au:N/C:N/I:N/A:C.

Exploitation Likelihood: MINIMAL

Affected Products
VendorProductAffected Versions
Amavis Amavis ≤ 2.4.1
Avast Avast Antivirus Professional 4.0 4.6 4.6.603 4.6.652 4.6.665 4.6.691
+5 more4.7.827 4.7.844 4.7.869 4.7.1043 4.7.1098
Avast Avast Antivirus ≤ 4.7.980
Avast Avast Antivirus Home 4.0 4.6 4.6.652 4.6.655 4.6.665 4.6.691
+5 more4.7.827 4.7.844 4.7.869 4.7.1043 4.7.1098
Avira Antivir Personal All versions
Avira Antivir All versions
Barracuda Networks Barracuda Spam Firewall All versions
Panda Panda Antivirus 2007
Panda Panda Antivirus And Firewall 2007
Picozip Picozip All versions
Rahul Dhesi Zoo ≤ 2.10
Unzoo Unzoo 4.4
Winace Winace All versions
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 7100 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hashc69adc83450d9618e99b8993b41db6a04253d36083efb8bc5e0f0ae9156bcd69553dc4de781a73de203471919926d2fba3706a96b769cba40454e89920851b71
Related CVEs affecting Amavis
CVE-1999-1512 10.0 The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to ex... CVE-2007-2026 7.8 The gnu regular expression code in file 4.20 allows context-dependent attacke... CVE-2007-1669 7.8 zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barra... CVE-2024-28054 7.4 Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of ... CVE-2002-1109 2.1 securetar, as used in AMaViS shell script 0.2.1 and earlier, allows users to ...
View all Amavis CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →