Dailydave: Re: Vista speach recognition

["George Ou" <george_ou () lanarchitect net>]

Doh!  I verified that this is exploitable!
http://blogs.zdnet.com/Ou/?p=416 


George
-----Original Message-----
From: dailydave-bounces () lists immunitysec com
[mailto:dailydave-bounces () lists immunitysec com] On Behalf Of Sebastian
Krahmer
Sent: Tuesday, January 30, 2007 6:42 AM
To: dailydave () lists immunitysec com
Subject: [Dailydave] Vista speach recognition


Hi,

I am in no way an Win expert but recently I read that vista will support
commands as they are spoken by the user.
What about websites where the browser is playing wav or similar audio files
upon visiting? what if they contain spoken commands? An exploit audio file
which speaks something like 'open shell' would be cool, eh?

Sebastian


--
~
~ perl self.pl
~ $_='print"\$_=\47$_\47;eval"';eval
~ krahmer () suse de - SuSE Security Team
~

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave