1728 matches found
Google Assistant Audio Privacy Controls Updated After Outcry
Google is unveiling new privacy controls for the Google Assistant virtual assistant, after the company came under fire earlier this year for eavesdropping on users’ personal audio snippets – without their permission. The tech giant on Monday promised more transparency around the audio data that i...
AI Emotion-Detection Arms Race
Voice systems are increasingly using AI techniques to determine emotion. A new paper describes an AI-based countermeasure to mask emotion in spoken words. Their method for masking emotion involves collecting speech, analyzing it, and extracting emotional features from the raw signal. Next, an AI...
Popular Samsung, LG Android Phones Open to 'Spearphone' Eavesdropping
A new way to eavesdrop on people’s mobile phone calls has come to light in the form of Spearphone – an attack that makes use of Android devices’ on-board accelerometers motion sensors to infer speech from the devices’ speakers. An acronym for “Speech privacy exploit via accelerometer-sensed...
New Attack Lets Android Apps Capture Loudspeaker Data Without Any Permission
Earlier this month, The Hacker News covered a story on research revealing how over 1300 Android apps are collecting sensitive data even when users have explicitly denied the required permissions. The research was primarily focused on how app developers abuse multiple ways around to collect locati...
The vulnerability of the Speech API’s software interface for speech recognition and synthesis allows a perpetrator to execute arbitrary code.
The vulnerability of the Speech API SAPI software interface for speech recognition and synthesis on Windows operating systems is related to the way the Text-to-Speech system processes input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially...
The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library allows a perpetrator to trigger a service failure.
The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library is related to initialization errors. Exploiting this vulnerability can allow attackers to cause service failures in applications by entering specially crafted data...
The vulnerability of the Spectgen tool in the Edinburgh Speech Tool Library allows a perpetrator to trigger a service failure.
The vulnerability of the Spectgen tool in the Edinburgh Speech Tool Library is related to division by zero errors. Exploiting this vulnerability could allow an attacker to cause a service failure in the application by entering specially crafted data...
The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library allows a perpetrator to trigger a service failure.
The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library is related to initialization errors. Exploiting this vulnerability can allow attackers to cause service failures in applications by entering specially crafted data...
The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library allows a perpetrator to trigger a service failure.
The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library is related to division by zero errors. Exploiting this vulnerability could allow an attacker to cause a service failure in the application by entering specially crafted data...
The vulnerability of the wfst_run application, which is part of the speech-tools speech recognition system, allows a violator to cause a service failure.
The vulnerability of the wfstrun application, which is part of the speech-tools speech recognition system, is related to overflow errors in the command line processing. Exploiting this vulnerability can allow an attacker to cause a service failure by submitting commands with specially crafted...
CVE-2019-0985
A remote code execution vulnerability exists when the Microsoft Speech API SAPI improperly handles text-to-speech TTS input. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. To exploit the vulnerability, an...
CVE-2019-0985
A remote code execution vulnerability exists when the Microsoft Speech API SAPI improperly handles text-to-speech TTS input. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. To exploit the vulnerability, an...
Remote code execution
A remote code execution vulnerability exists when the Microsoft Speech API SAPI improperly handles text-to-speech TTS input, aka 'Microsoft Speech API Remote Code Execution Vulnerability'...
CVE-2019-0985 Microsoft Speech API Remote Code Execution Vulnerability
...
CVE-2019-0985
CVE-2019-0985 is a remote code execution vulnerability in Microsoft Speech API (SAPI) triggered by text-to-speech input. The issue arises when TTS content invoked via scripting is processed in memory, potentially allowing arbitrary code execution in the context of the current user. How it is expl...
Microsoft Windows Multiple Vulnerabilities (KB4503292)
This host is missing a critical security update according to Microsoft KB4503292 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Speech API Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Microsoft Speech API SAPI improperly handles text-to-speech TTS input. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. To exploit the vulnerability, an...
Microsoft Windows Speech API CVE-2019-0985 Remote Code Execution Vulnerability
Description Microsoft Windows Speech API is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems...
Microsoft Speech API Remote Code Execution (CVE-2019-0985)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
KLA11874 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface, execute arbitrary code, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...