CVE-2021-32198

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

EmTec ZOC through 8.02.4 allows remote servers to cause a denial of service (Windows GUI hang) by telling the ZOC window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. In other words, it does not implement a usleep or similar delay upon processing a title change.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.emtec.com/downloads/zoc/zoc_changes.txtRelease Notes, Vendor Advisory
https://pastebin.com/0xhrDvW0Third Party Advisory
http://www.emtec.com/downloads/zoc/zoc_changes.txtRelease Notes, Vendor Advisory
https://pastebin.com/0xhrDvW0Third Party Advisory

Timeline

Published: Jun 6, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-322026.1In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the blog post creation pa CVE-2021-32237.5Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files.CVE-2021-322336.1SmarterTools SmarterMail before Build 7776 allows XSS.CVE-2021-322349.8SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution.CVE-2021-322387.8Epic Games / Psyonix Rocket League <=1.95 is affected by Buffer Overflow. Stack-based buffer overflow occurs when Rocket League handles UPK CVE-2021-32245.4A stored cross-site scripting (XSS) vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter.CVE-2021-322438.8FOGProject v1.5.9 is affected by a File Upload RCE (Authenticated).CVE-2021-322445.4Cross Site Scripting (XSS) in Moodle 3.10.3 allows remote attackers to execute arbitrary web script or HTML via the "Description" field.CVE-2021-322455.4In PageKit v1.0.18, a user can upload SVG files in the file upload portion of the CMS. These SVG files can contain malicious scripts. This f CVE-2021-322566.5An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangle_type in rust-demangl CVE-2021-322637.8ok-file-formats through 2021-04-29 has a heap-based buffer overflow in the ok_csv_circular_buffer_read function in ok_csv.c.CVE-2021-322658.8An issue was discovered in Bento4 through v1.6.0-637. A global-buffer-overflow exists in the function AP4_MemoryByteStream::WritePartial() l