Description
A certain ActiveX control in sapi.dll (aka the Speech API) in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to delete arbitrary files, and conduct other unauthorized activities, via a web page with an embedded sound object that contains voice commands to an enabled microphone, allowing for interaction with Windows Explorer.
References
- http://blogs.technet.com/msrc/archive/2007/01/31/issue-regarding-windows-vista-speech-recognition.aspx
- 30578 third-party-advisory
- [dailydave] 20070131 Vista speach recognition mailing-list
- 22359 vdb-entry
- TA08-162B third-party-advisory
- oval:org.mitre.oval:def:5489 vdb-entry signature
- HPSBST02344 vendor-advisory
- [dailydave] 20070130 Vista speach recognition mailing-list
- 1020232 vdb-entry
- ADV-2008-1779 vdb-entry
- MS08-032 vendor-advisory
- [dailydave] 20070130 Vista speach recognition mailing-list
- [dailydave] 20070130 Vista speach recognition mailing-list