1729 matches found
CVE-2017-2534
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Speech Framework" component. It allows attackers to conduct sandbox-escape attacks via a crafted app...
CVE-2017-2534
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Speech Framework" component. It allows attackers to conduct sandbox-escape attacks via a crafted app...
Memory corruption
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Speech Framework" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service memory corruption via a crafted app...
Code injection
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Speech Framework" component. It allows attackers to conduct sandbox-escape attacks via a crafted app...
CVE-2017-2534
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Speech Framework" component. It allows attackers to conduct sandbox-escape attacks via a crafted app...
CVE-2017-6977
CVE-2017-6977 is a memory corruption/sandbox escape vulnerability in the Speech Framework affecting macOS Sierra (variant before 10.12.5). The issue is exposed via crafted apps and is addressed by Apple in macOS Sierra 10.12.5 (Security Update 2017-002 El Capitan/Yosemite included). The Apple adv...
CVE-2017-2534
CVE-2017-2534 affects macOS Sierra (Speech Framework). A crafted app could cause a sandbox-escape via the Speech Framework vulnerability. Affected: macOS before 10.12.5. Impact: sandbox escape (local, requires user interaction). Remediation: Apple Security Update 2017-002 for macOS 10.12.5 (and r...
CVE-2017-6977
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Speech Framework" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service memory corruption via a crafted app...
Google reCaptcha Bypass Technique Uses Google's Own Tools
A proof of concept bypass of Google’s reCaptcha V2 verification system, posted online Tuesday, uses Google’s own web-based tools to pull off the skirting of the system. The tool dubbed ReBreakCaptcha “lets you easily bypass Google’s reCaptcha v2 anywhere on the web,” according to the author of th...
EFF Files Lawsuit Challenging DMCA's Restrictions Security Researchers
The Electronic Frontier Foundation filed a lawsuit Thursday against the U.S. Government over a provision within the Digital Millennium Copyright Act that it says impinges on free speech and hobbles security researchers ability to do their job. The lawsuit asks the court to strike down the highly...
The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.
The Google Chrome browser contains a vulnerability related to memory reuse after deallocation use-after-free error in the browser/ui/views/speechrecognitionbubbleviews.cc file. Exploiting this vulnerability allows malicious actors to remotely cause system failures or other adverse effects through...
The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.
The Google Chrome browser contains a vulnerability related to memory reuse after deallocation, known as the “use-after-free error” in the Freebsoft Laboratory Speech Dispatcher module. Exploiting this vulnerability allows malicious actors to cause service interruptions application freezes or othe...
The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.
The Google Chrome browser contains a vulnerability related to memory reuse after deallocation use-after-free error in the browser/ui/views/speechrecognitionbubbleviews.cc file. Exploiting this vulnerability allows malicious actors to remotely cause system failures or other adverse effects through...
Microsoft Wins Widespread Support in Privacy Clash With Govt.
Microsoft’s lawsuit against the U.S. government for the right to tell its customers when a federal agency is looking at their emails is getting widespread support by privacy advocates. For many, Microsoft’s stance lends an important and powerful voice to ongoing efforts to reform the Electronic...
Train speech for kids 4-7 Free - Dynamic Code Loading, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Train speech for kids 4-7 Free published at the 'play' market has multiple vulnerabilities...
Google Text-to-speech - Customized SSL, Hardcoded secrets, LGPL license vulnerabilities
HackApp vulnerability scanner discovered that application Google Text-to-speech published at the 'play' market has multiple vulnerabilities...
Speech To Text & Text To Voice - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Speech To Text & Text To Voice published at the 'play' market has multiple vulnerabilities...
Classic Text To Speech Engine - External URLs, Native code usage, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Classic Text To Speech Engine published at the 'play' market has multiple vulnerabilities...
IVONA Text-to-Speech HQ - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application IVONA Text-to-Speech HQ published at the 'play' market has multiple vulnerabilities...
SPEECH TO TEXT TRANSLATOR TTS - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application SPEECH TO TEXT TRANSLATOR TTS published at the 'play' market has multiple vulnerabilities...