Lucene search
+L

1692 matches found

zdt
zdt
added 2007/06/13 12:00 a.m.27 views

Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)

Exploit for unknown platform in category remote exploits ================================================================ Microsoft Speech API ActiveX control Remote BoF Exploit xp sp2 ================================================================ REM metasploit, add a user 'su' with pass 'tzu'...

7.1AI score
SaveExploits0
Saint
Saint
added 2007/06/13 12:00 a.m.48 views

Microsoft Speech API memory corruption

Added: 06/13/2007 CVE: CVE-2007-2222 BID: 24426 OSVDB: 35353 Background Microsoft Speech API allows development of Windows applications supporting speech-based interaction. Problem A memory corruption vulnerability in Microsoft Speech API 4 allows command execution when a user loads a specially...

9.3CVSS6.5AI score0.54738EPSS
SaveExploits7
Saint
Saint
added 2007/06/13 12:00 a.m.46 views

Microsoft Speech API memory corruption

Added: 06/13/2007 CVE: CVE-2007-2222 BID: 24426 OSVDB: 35353 Background Microsoft Speech API allows development of Windows applications supporting speech-based interaction. Problem A memory corruption vulnerability in Microsoft Speech API 4 allows command execution when a user loads a specially...

9.3CVSS6.5AI score0.54738EPSS
SaveExploits7
canvas
canvas
added 2007/06/12 7:30 p.m.47 views

Immunity Canvas: SPEECH

Name| speech ---|--- CVE| CVE-2007-2222 Exploit Pack| CANVAS Description| Microsoft Speech API 4v MS07-033 Notes| CVE Name: CVE-2007-2222 VENDOR: Microsoft MSADV: MS07-033 Repeatability: Infinite client side - no crash MSRC: http://www.microsoft.com/technet/security/Bulletin/MS07-033.mspx CVE URL...

9.3CVSS0.1AI score0.54738EPSS
SaveExploits7
CERT
CERT
added 2007/06/12 12:00 a.m.36 views

Microsoft Speech API ActiveX controls contain buffer overflows

Overview The Microsoft Speech API ActiveListen and ActiveVoice ActiveX controls contain multiple buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Speech API is a software package that provides text-to-spee...

9.3CVSS7AI score0.54738EPSS
SaveExploits7References2
NVD
NVD
added 2007/02/03 1:28 a.m.33 views

CVE-2007-0675

A certain ActiveX control in sapi.dll aka the Speech API in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to delete arbitrary files, and conduct other unauthorized activities, via a web page with an embedded sou...

7.6CVSS6.7AI score0.1722EPSS
SaveExploits1References13
Prion
Prion
added 2007/02/03 1:28 a.m.25 views

Design/Logic Flaw

A certain ActiveX control in sapi.dll aka the Speech API in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to delete arbitrary files, and conduct other unauthorized activities, via a web page with an embedded sou...

7.6CVSS7AI score0.1722EPSS
SaveExploits1References13
Cvelist
Cvelist
added 2007/02/03 1:00 a.m.37 views

CVE-2007-0675

A certain ActiveX control in sapi.dll aka the Speech API in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to delete arbitrary files, and conduct other unauthorized activities, via a web page with an embedded sou...

6.7AI score0.1722EPSS
SaveExploits1References13
securityvulns
securityvulns
added 2007/02/03 12:00 a.m.44 views

[Dailydave] Vista speach recognition

I ran some more tests and here is a very realistic scenario. 1. Website says "start listening" to toggle an idle speech system in Vista to listening mode. 2. Website says "start", "windows explorer" 3. Website says "downloads", "documents", 3, OK, to toggle to downloads then back to documents and...

7AI score
SaveExploits0
NVD
NVD
added 2002/10/04 4:00 a.m.17 views

CVE-2002-1006

Cross-site scripting XSS vulnerability in BBC Education Text to Speech Internet Enhancer Betsie 1.5.11 and earlier allows remote attackers to execute arbitrary web script via parserl.pl...

6.8CVSS6.2AI score0.0436EPSS
SaveExploits2References4
exploitpack
exploitpack
added 2001/09/11 12:00 a.m.24 views

SpeechD 0.10.2 - Privileged Command Execution

SpeechD 0.10.2 - Privileged Command Execution source: https://www.securityfocus.com/bid/3326/info SpeechD is a device-independent layer for speech synthesis under Linux, providing an interface for speech-based applications or device drivers. SpeechD has been found to contain a flaw under certain...

0.8AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 1970/01/01 12:00 a.m.11 views

Windows 10 Insider Preview Build 18362.84

None None...

6.1AI score
SaveExploits0
Rows per page
Query Builder