EmTec ZOC through 8.02.4 allows remote servers to cause a denial of service (Windows GUI hang) by telling the ZOC window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. In other words, it does not implement a usleep or similar delay upon processing a title change.
References
Link | Resource |
---|---|
http://www.emtec.com/downloads/zoc/zoc_changes.txt | Release Notes Vendor Advisory |
https://pastebin.com/0xhrDvW0 | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2021-06-06T11:41:29
Updated: 2021-08-26T15:55:27
Reserved: 2021-05-07T00:00:00
Link: CVE-2021-32198
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-06-06T12:15:07.380
Modified: 2021-09-21T16:39:27.700
Link: CVE-2021-32198
JSON object: View
Redhat Information
No data.
CWE