CVE-2007-1670 Denial of service in n/a

What is CVE-2007-1670?

CVE-2007-1670 is a high-severity denial of service vulnerability in n/a, published on 9 May 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Panda Software Antivirus before 20070402 allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

Which versions are affected by CVE-2007-1670?

It affects 6 products.

Products include Panda Panda Activescan, Panda Panda Antivirus, Panda Panda Platinum 2006 Internet Security, Panda Panda Platinum 2007 Internet Security, Panda Panda Titanium 2005 Antivirus, Panda Panda Titanium 2006 Antivirus \+ Antispyware.

How do I fix CVE-2007-1670?

No fix has been published for CVE-2007-1670 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2007-1670 being exploited?

There is no known exploitation of CVE-2007-1670 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2009-3735 Code injection in n/a Critical 9.3
• CVE-2008-3155 Memory corruption in n/a Critical 9.3
• CVE-2008-3156 Code injection in n/a Critical 9.3
• CVE-2005-3922 Memory corruption in n/a High 7.5
• CVE-2006-4295 Cross-site scripting in n/a Medium 4.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-32r3-xpw6-2rr3.