CVSS: 7.8EPSS: 1%CPEs: 59EXPL: 1CVE-2007-1673
https://notcve.org/view.php?id=CVE-2007-1673
09 May 2007 — unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file. El archivo unzoo.c, tal como se utiliza en varios productos, incluyendo AMaViS versión 2.4.1 y anteriores, permite a los atacantes remotos causar una denegación de servicio (bucle infinito) por medio de un archivo ZOO con una estructura direntry que apunta hacia un archivo anterior. • http://osvdb.org/36208 • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 4CVE-2006-1269 – Zoo 2.10 - Parse.c Local Buffer Overflow
https://notcve.org/view.php?id=CVE-2006-1269
19 Mar 2006 — Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command line arguments, which are not properly handled during archive creation. NOTE: since this issue is local and not setuid, the set of attack scenarios is limited, although is reasonable to expect that there are some situations in which the zoo user might automatically list attacker-controlled filenames to add to the zoo archive. • https://www.exploit-db.com/exploits/27425 •
CVSS: 7.8EPSS: 2%CPEs: 1EXPL: 3CVE-2006-0855
https://notcve.org/view.php?id=CVE-2006-0855
23 Feb 2006 — Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected. • http://archives.neohapsis.com/archives/bugtraq/2006-04/0061.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •