CVE-2007-1670 Panda Software Antivirus before 20070402 allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.
HighCVSS 7.8
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Panda Software Antivirus before 20070402 allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| panda activescan | = 5.0 | No fix listed |
| panda activescan | = 5.53.00 | No fix listed |
| panda activescan | = 5.54.1 | No fix listed |
| panda antivirus | = 2.0 | No fix listed |
| panda platinum 2006 internet security | All versions | No fix listed |
| panda platinum 2007 internet security | All versions | No fix listed |
| panda titanium 2005 antivirus | All versions | No fix listed |
| panda titanium 2006 antivirus + antispyware | All versions | No fix listed |
References
- 35845 vdb-entry
- 25152 third-party-advisory vendor-advisory
- 20070504 Multiple vendors ZOO file decompression infinite loop DoS mailing-list
- 23823 exploit vdb-entry
- ADV-2007-1700 vdb-entry
- multiple-vendor-zoo-dos(34080) vdb-entry