Hyland Perceptive Filters releases before 2023-12-08 (e.g., 11.4.0.2647), as used in Cisco IronPort Email Security Appliance Software, Cisco Secure Email Gateway, and various non-Cisco products, allow attackers to trigger a segmentation fault and execute arbitrary code via a crafted document.
The product writes data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://bst.cisco.com/quickview/bug/CSCwe11003 | vendor advisory |