CVE-2007-1669

HIGH ⚠ Exploit

zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with virusdef before 2.0.6399, (2) Spam Firewall before 3.4 20070319 with virusdef befo...

Affects 2 products across 2 vendors.

CVSS 2.07.8
EPSS12.2%
Percentile96th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no confidentiality impact, no integrity impact.
◆ AI Analysis — automated analysis, not human-reviewed

A vulnerability in the zoo decoder 2.10, used in various products including Barracuda Spam Firewall and AMaViS, allows remote attackers to cause a denial of service through a crafted ZOO archive.

BSID: BS-2007-GLOBAL-160050-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2007-1669?
A vulnerability in the zoo decoder 2.10, used in various products including Barracuda Spam Firewall and AMaViS, allows remote attackers to cause a denial of service through a crafted ZOO archive.
What is the CVSS score for CVE-2007-1669?
CVE-2007-1669 has CVSS 7.8 (High). Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C. EPSS: 12.2%.
Is CVE-2007-1669 actively exploited?
Public exploit available for CVE-2007-1669. Exploitation risk elevated.
How do I remediate CVE-2007-1669?
Priority: HIGH.
What systems are affected by CVE-2007-1669?
CVE-2007-1669 affects Amavis Amavis.
Vulnerability Details
CVE IDCVE-2007-1669
BSIDBS-2007-GLOBAL-160050-H BreachSpider Global ID
CVSS VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Published2007-05-09
Last Modified2026-06-16
ICS Relevance10%
SourceNVD
Official Description

zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with virusdef before 2.0.6399, (2) Spam Firewall before 3.4 20070319 with virusdef before 2.0.6399o, and (3) AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The attack involves sending a specially crafted ZOO archive with a direntry structure that points to a previous file, causing the zoo decoder to enter an infinite loop.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Amavis Amavis ≤ 2.4.1

Platforms listed by the source (the vulnerable product runs on these; they are not themselves vulnerable): Barracuda Networks Barracuda Spam Firewall

Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 7100 Days
CISA known-exploitedNot in KEV catalog
Public Exploit⚠ Available — Reference
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
Related CVEs affecting Amavis
CVE-1999-1512 10.0 The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to ex... CVE-2007-2026 7.8 The gnu regular expression code in file 4.20 allows context-dependent attacke... CVE-2007-1673 7.8 unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, all... CVE-2024-28054 7.4 Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of ... CVE-2002-1109 2.1 securetar, as used in AMaViS shell script 0.2.1 and earlier, allows users to ...
View all Amavis CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →