CVE-2007-0675

A certain ActiveX control in sapi.dll (aka the Speech API) in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled…

published February 3, 2007

CVSS
—
EPSS
18%
Percentile
97.2
In the wild
Unconfirmed
What it is

A certain ActiveX control in sapi.dll (aka the Speech API) in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to delete arbitrary files, and conduct other unauthorized activities, via a web page with an embedded sound object that contains voice commands to an enabled microphone, allowing for interaction with Windows Explorer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.17740 · 97.2th percentile
Published
2007-02-03T01:00Z
EPSS history
Timeline
  • 03 FEB 01:00Z
    A certain ActiveX control in sapi.dll (aka the Speech API) in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled…
    cvelistv5