[SECURITY] Fedora 9 Update: emacspeak-28.0-3.fc9

Emacspeak is a speech interface that allows visually impaired users to interact independently and efficiently with the computer. Emacspeak has dramatically changed how the author and hundreds of blind and visually impaired users around the world interact with the personal computer and the Interne...

Microsoft Windows Speech组件语音识别远程命令执行漏洞（MS08-032）

BUGTRAQ ID: 22359 CVECAN ID: CVE-2007-0675 Microsoft Windows是微软发布的非常流行的操作系统。 如果Windows中启用了语音识别功能的话，则Speech组件sapi.dll中存在远程执行代码漏洞。攻击者可以通过构造嵌入了声音对象的特制网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft...

Microsoft Security Bulletin MS08-032 - Moderate Cumulative Security Update of ActiveX Kill Bits (950760)

Microsoft Security Bulletin MS08-032 - Moderate Cumulative Security Update of ActiveX Kill Bits 950760 Published: June 10, 2008 Version: 1.0 General Information Executive Summary This security update resolves a publicly reported vulnerability for the Microsoft Speech API. The vulnerability could...

Microsoft Vista speech recognition unauthorized access

Speech recognition may be used as an attack vector against client computer with e.h. HTML page with embedded sound...

Microsoft Windows Speech Components sapi.dll Code Execution (MS08-032; CVE-2007-0675)

The ActiveX Speech Components sapi.dll is part of the Microsoft Speech Application Programming Interface SAPI that allows the use of speech recognition and speech synthesis within Windows applications. A remote code execution vulnerability has been reported in the ActiveX Speech Components...

[SECURITY] Fedora 7 Update: speex-1.2-0.3.beta1

Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates in the 2-45 kbps range. Possible applications include Voice over IP VoIP, Internet audio streaming, audio books, and archiving of speech data e.g. voice mail...

[SECURITY] Fedora 7 Update: kdeaccessibility-3.5.8-2.fc7

Included with this package are: kmag, a screen magnifier, kmousetool, a program for people whom it hurts to click the mouse, kmouth, program that allows people who have lost their voice to let their computer speak for them...

[SECURITY] Fedora 7 Update: ekg-1.7-1.fc7

EKG "Eksperymentalny Klient Gadu-Gadu" is an open source gadu-gadu client for UNIX systems. Gadu-Gadu is an instant messaging program, very popular in Poland. EKG features include: - irssi-like ncurses interface - sending and receiving files - voice conversations - launching shell commands on...

Microsoft IE Speech API 4 COM对象实例化缓冲区溢出漏洞（MS07-033）

Internet Explorer是一款非常流行的WEB浏览器。 IE中使用的Speech API的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 IE中使用了Microsoft Speech API软件包提供文本-语音和语音识别功能。Microsoft Speech...

Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)

No description provided by source. !-- 01/06/2007 23.19.50 Microsoft Windows DirectSpeechSynthesis Module XVoice.dll / DirectSpeechRecognition Module Xlisten.dll remote buffer overflow exploit / 2k sp4 seh version both the dlls are located in %SystemRoot%\speech folder...

Internet Explorer COM Object Instantiation Memory Corruption (MS07-033; CVE-2007-0218; CVE-2007-2222)

COM objects are used to enable data exchange between processes and the creation of dynamic object in different programming languages.Multiple remote code execution vulnerabilities have been reported in Microsoft Internet Explorer and in Microsoft Speech COM objects.A remote attacker could exploit...

Microsoft Windows speech recognition / synthesis ActiveX buffer overflow

Buffer overflows in DirectSpeechSynthesis Module XVoice.dll / DirectSpeechRecognition Module Xlisten.dll...

Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)

No description provided by source. !-- 6.30 10/06/2007 Microsoft Windows DirectSpeechSynthesis Module XVoice.dll 4.0.4.2512 / DirectSpeechRecognition Module Xlisten.dll 4.0.4.2512 remote buffer overflow exploit/ xp sp2 version both dlls are vulnerable, this is the poc for the first one...

Microsoft Speech API memory corruption

Added: 06/13/2007 CVE: CVE-2007-2222 BID: 24426 OSVDB: 35353 Background Microsoft Speech API allows development of Windows applications supporting speech-based interaction. Problem A memory corruption vulnerability in Microsoft Speech API 4 allows command execution when a user loads a specially...

Microsoft Speech API memory corruption

Added: 06/13/2007 CVE: CVE-2007-2222 BID: 24426 OSVDB: 35353 Background Microsoft Speech API allows development of Windows applications supporting speech-based interaction. Problem A memory corruption vulnerability in Microsoft Speech API 4 allows command execution when a user loads a specially...

Microsoft Speech API ActiveX Control (Windows XP SP2) - Remote Buffer Overflow (MS07-033)

REM metasploit, add a user 'su' with pass 'tzu' scode =...

Microsoft Speech API ActiveX Control (Windows 2000 SP4) - Remote Buffer Overflow (MS07-033)

object...

Microsoft Speech API ActiveX Control (Windows XP SP2) - Remote Buffer Overflow (MS07-033)

Microsoft Speech API ActiveX Control Windows XP SP2 - Remote Buffer Overflow MS07-033 REM metasploit, add a user 'su' with pass 'tzu' scode =...

Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)

Exploit for unknown platform in category remote exploits =================================================================== Microsoft Speech API ActiveX control Remote BoF Exploit win2k sp4 =================================================================== !-- 01/06/2007 23.19.50 Microsoft...

Microsoft Speech API ActiveX Control (Windows 2000 SP4) - Remote Buffer Overflow (MS07-033)

Microsoft Speech API ActiveX Control Windows 2000 SP4 - Remote Buffer Overflow MS07-033 !-- 01/06/2007 23.19.50 Microsoft Windows DirectSpeechSynthesis Module XVoice.dll / DirectSpeechRecognition Module Xlisten.dll remote buffer overflow exploit / 2k sp4 seh version both the dlls are located in...