text-to-speech vulnerabilities and exploits

(subscribe to this query)

7.2

CVSSv2

The Text-to-speech Engine (aka SamsungTTS) application prior to 3.0.02.7 and 3.0.00.101 for Android allows a local malicious user to escalate privileges, e.g., to system privileges. The Samsung case ID is 101755.

Samsung Text-to-speech

8 Github repositories

NA

The ResponsiveVoice Text To Speech WordPress plugin prior to 1.7.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored ...

Responsivevoice Responsivevoice Text To Speech

9.3

CVSSv2

A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka "Microsoft Text-To-Speech Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, ...

Microsoft Windows Server 2016 1709 Microsoft Windows 10 1607 Microsoft Windows 10 1709 Microsoft Windows Server 2016 1803 Microsoft Windows Server 2016 -Microsoft Windows 10 1803 Microsoft Windows 10 1809 Microsoft Windows Server 2019 -Microsoft Windows 10 1703 Microsoft Windows 10 -

6.8

CVSSv2

A remote code execution vulnerability exists when the Microsoft Speech API (SAPI) improperly handles text-to-speech (TTS) input, aka 'Microsoft Speech API Remote Code Execution Vulnerability'.

Microsoft Windows Server 2008 R2 Microsoft Windows 7 -

1 Article

6.8

CVSSv2

Cross-site scripting (XSS) vulnerability in BBC Education Text to Speech Internet Enhancer (Betsie) 1.5.11 and previous versions allows remote malicious users to execute arbitrary web script via parserl.pl.

Bbc Education Betsie 1.5.10 Bbc Education Betsie 1.5.2 Bbc Education Betsie 1.5.9 Bbc Education Betsie 1.5.3 Bbc Education Betsie 1.5.4 Bbc Education Betsie 1.5.5 Bbc Education Betsie 1.5.6 Bbc Education Betsie 1.5.7 Bbc Education Betsie 1.5 Bbc Education Betsie 1.5.1 Bbc Education Betsie 1.5.11 Bbc Education Betsie 1.5.8

1 EDB exploit

7.5

CVSSv2

Use-after-free vulnerability in Free(b)soft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome prior to 34.0.1847.116, allows remote malicious users to cause a denial of service (application hang) or possibly have unspecified other impact via a text-to-speech request.

Google Chrome

4.6

CVSSv2

The text-to-speech engine in libretro RetroArch for Windows 1.9.0 passes unsanitized input to PowerShell through platform_win32.c via the accessibility_speak_windows function, which allows attackers who have write access on filesystems that are used by RetroArch to execute code v...

Libretro Retroarch

9.3

CVSSv2

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote malicious users to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NC...

Altdo Mp3 Record And Edit Audio Master 1.2 Americanshareware Mp3 Wav Converter 3.1.8 Code-it Softare Wave Mp3 Editor 10.1 Dandans Digital Media Products Easy Audio Editor 7.4 Dandans Digital Media Products Full Audio Converter 4.2 Iaudiosoft.com Absolute Sound Recorder 3.4.5 Iaudiosoft.com Absolute Video To Audio Converter 2.7.9 J Hepple Products Fx Movie Joiner And Splitter 6.2.8 J Hepple Products Fx Movie Splitter 6.4.7 Mcfunsoft Audio Editor 6.3.3 Build 489 Mcfunsoft Audio Recorder For Free 6.1 Movavi Convertmovie 4.4 Cdburnerxp Cdburnerxp Pro 3.0.116 Cheetahburner Cheetah Cd Burner 3.56 Digital Borneo Audio Mixer And Editor 1.1.0 Easy Ringtone Maker Easy Ringtone Maker 2.0.5 J Hepple Products Fx Audio Editor 4.7.11 J Hepple Products Fx Audio Tools 7.3.4 Joshua Mediasoft Audio Convertor Plus 2.2 Joshua Mediasoft Video Converter Plus 3.01 Mcfunsoft Ipod Music Converter 5.1 Mcfunsoft Recording To Ipod Solution 5.1

3 EDB exploits

NA

The Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 3.6.4. This makes it possible for ...

NA

The Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.4. This is due to missing or incorrect nonce validation on several functions. This makes it pos...

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook