CVE-2016-1405: libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Secur...

Security readout for executives and security teams

This vulnerability can let a remote sender crash and restart the AMP scanning process on affected Cisco ESA and WSA appliances by submitting a crafted document. The known impact is denial of service to the malware-scanning component, not data theft or code execution. Exposure is most likely where affected Cisco Email Security Appliance or Web Security Appliance versions process untrusted documents through AMP. Environments without those products or already on the fixed versions named in the advisory are less likely exposed based on the provided sources. Prioritize remediation for internet-facing mail or web security gateways because the affected component handles untrusted content. Business risk is service degradation and reduced malware-scanning reliability, not confirmed compromise from the provided sources. Mitigation focus: Upgrade Cisco ESA to 9.7.0-125 or later if affected.; Upgrade Cisco WSA to 9.0.1-135 or 9.1.1-041 or later if affected.; Review Cisco advisory cisco-sa-20160531-wsa-esa for exact upgrade guidance..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.