Command Execution Vulnerability in Swift Text-to-Speech Software

Swift Text to Speech Software is a speech synthesis software that converts text to speech. It is suitable for a variety of scenarios such as shopping mall store advertisements, audio production, audible reading and so on. A command execution vulnerability exists in Swift Text to Speech Software,...

EvilQuest Mac Ransomware Has Keylogger, Crypto Wallet-Stealing Abilities

A rare new ransomware strain targeting macOS users has been discovered, called EvilQuest. Researchers say the ransomware is being distributed via various versions of pirated software. EvilQuest, first discovered by security researcher Dinesh Devadoss, goes beyond the normal encryption capabilitie...

DRUPAL-CONTRIB-2020-024

This module enables you to add a configured ReadSpeaker button for text-to-speech for your site visitors. The module doesn't sufficiently sanitize block configuration causing a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role wi...

Lightning Text-to-Speech Converter has a dll hijacking vulnerability

Lightning text-to-speech conversion software is a text-to-speech conversion software with intelligent text and speech conversion under Jiangxia Information Technology Huizhou Co. Lightning Text-to-Speech Converter has a dll hijacking vulnerability that can be exploited by attackers to execute...

CVE-2020-10263 - Smart Speaker Root Shell via internal UART

An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.52.4. Attackers can get root shell by accessing the UART interface and then they can i read Wi-Fi SSID or password, ii read the dialogue text files between users and XIAOMI XIAOAI speaker Pro LX06, iii use Text-To-Speech tools pretend...

8x8: Blind Command Injection #1

OS Command injection on text-to-speech functionality API. This issue arised because of the generic text to speech conversion tool being used here in the web application & because of the fact that the user input data was not being sanitised before taking it to the server for output of the inputed...

CVE-2019-16253

The Text-to-speech Engine aka SamsungTTS application before 3.0.02.7 and 3.0.00.101 for Android allows a local attacker to escalate privileges, e.g., to system privileges. The Samsung case ID is 101755...

CVE-2019-16253

The Text-to-speech Engine aka SamsungTTS application before 3.0.02.7 and 3.0.00.101 for Android allows a local attacker to escalate privileges, e.g., to system privileges. The Samsung case ID is 101755...

CVE-2019-16253: Undefined Security Weakness

The Text-to-speech Engine aka SamsungTTS application before 3.0.02.7 and 3.0.00.101 for Android allows a local attacker to escalate privileges, e.g., to system privileges. The Samsung case ID is 101755...

The vulnerability of the Speech API’s software interface for speech recognition and synthesis allows a perpetrator to execute arbitrary code.

The vulnerability of the Speech API SAPI software interface for speech recognition and synthesis on Windows operating systems is related to the way the Text-to-Speech system processes input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially...

CVE-2019-0985

A remote code execution vulnerability exists when the Microsoft Speech API SAPI improperly handles text-to-speech TTS input. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. To exploit the vulnerability, an...

CVE-2019-0985

A remote code execution vulnerability exists when the Microsoft Speech API SAPI improperly handles text-to-speech TTS input. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. To exploit the vulnerability, an...

Remote code execution

A remote code execution vulnerability exists when the Microsoft Speech API SAPI improperly handles text-to-speech TTS input, aka 'Microsoft Speech API Remote Code Execution Vulnerability'...

CVE-2019-0985 Microsoft Speech API Remote Code Execution Vulnerability

...

CVE-2019-0985: Out-of-bounds Write

A remote code execution vulnerability exists when the Microsoft Speech API SAPI improperly handles text-to-speech TTS input. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. To exploit the vulnerability, an...

Microsoft Speech API Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Microsoft Speech API SAPI improperly handles text-to-speech TTS input. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. To exploit the vulnerability, an...

PT-2019-2601

Name of the Vulnerable Software and Affected Versions Microsoft Speech API SAPI affected versions not specified Description A remote code execution issue exists due to the improper handling of text-to-speech TTS input by the Microsoft Speech API SAPI. This allows a remote attacker to execute...

May 1, 2019—KB4501835 (OS Build 17763.439)

None None...

CVE-2018-8634

A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka "Microsoft Text-To-Speech Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers...

CVE-2018-8634

A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka "Microsoft Text-To-Speech Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers...