Format string vulnerability in Cisco Email Security Appliance (ESA) 7.6.0 and 8.0.0 allows remote attackers to cause a denial of service (memory overwrite or service outage) via format string specifiers in an HTTP request, aka Bug ID CSCug21497.
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Email_security_appliance | Cisco | 7.6.0 (including) | 7.6.0 (including) |
| Email_security_appliance | Cisco | 8.0.0 (including) | 8.0.0 (including) |