Format String attack vectors can lead to denial of service attacks in some cases as they can be used to corrupt memory on the server (which often leads to your webserver, such as IIS or Apache, crashing). In some cases, format string attacks can be used to steal data, or execute arbitrary code. Arbitrary code execution could allow an attacker to gain control of the webserver.