The vulnerability of the Speech API’s software interface for speech recognition and synthesis allows a perpetrator to execute arbitrary code.

The vulnerability of the Speech API SAPI software interface for speech recognition and synthesis on Windows operating systems is related to the way the Text-to-Speech system processes input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially...

The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library allows a perpetrator to trigger a service failure.

The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library is related to initialization errors. Exploiting this vulnerability can allow attackers to cause service failures in applications by entering specially crafted data...

The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library allows a perpetrator to trigger a service failure.

The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library is related to division by zero errors. Exploiting this vulnerability could allow an attacker to cause a service failure in the application by entering specially crafted data...

The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library allows a perpetrator to trigger a service failure.

The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library is related to initialization errors. Exploiting this vulnerability can allow attackers to cause service failures in applications by entering specially crafted data...

The vulnerability of the wfst_run application, which is part of the speech-tools speech recognition system, allows a violator to cause a service failure.

The vulnerability of the wfstrun application, which is part of the speech-tools speech recognition system, is related to overflow errors in the command line processing. Exploiting this vulnerability can allow an attacker to cause a service failure by submitting commands with specially crafted...

The vulnerability of the Spectgen tool in the Edinburgh Speech Tool Library allows a perpetrator to trigger a service failure.

The vulnerability of the Spectgen tool in the Edinburgh Speech Tool Library is related to division by zero errors. Exploiting this vulnerability could allow an attacker to cause a service failure in the application by entering specially crafted data...

CVE-2019-0985

A remote code execution vulnerability exists when the Microsoft Speech API SAPI improperly handles text-to-speech TTS input. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. To exploit the vulnerability, an...

CVE-2019-0985

A remote code execution vulnerability exists when the Microsoft Speech API SAPI improperly handles text-to-speech TTS input. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. To exploit the vulnerability, an...

Remote code execution

A remote code execution vulnerability exists when the Microsoft Speech API SAPI improperly handles text-to-speech TTS input, aka 'Microsoft Speech API Remote Code Execution Vulnerability'...

CVE-2019-0985 Microsoft Speech API Remote Code Execution Vulnerability

...

CVE-2019-0985

CVE-2019-0985 is a remote code execution vulnerability in Microsoft Speech API (SAPI) triggered by text-to-speech input. The issue arises when TTS content invoked via scripting is processed in memory, potentially allowing arbitrary code execution in the context of the current user. How it is expl...

Microsoft Windows Multiple Vulnerabilities (KB4503292)

This host is missing a critical security update according to Microsoft KB4503292 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Speech API Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Microsoft Speech API SAPI improperly handles text-to-speech TTS input. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. To exploit the vulnerability, an...

Microsoft Speech API Remote Code Execution (CVE-2019-0985)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Speech API CVE-2019-0985 Remote Code Execution Vulnerability

Description Microsoft Windows Speech API is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems...

KLA11874 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface, execute arbitrary code, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...

May 1, 2019—KB4501835 (OS Build 17763.439)

None None...

CVE-2018-8634

A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka "Microsoft Text-To-Speech Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers...

CVE-2018-8634

A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka "Microsoft Text-To-Speech Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers...

Remote code execution

A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka "Microsoft Text-To-Speech Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers...