[Dailydave] Vista speach recognition

[George Ou]

Doh!  I verified that this is exploitable!
http://blogs.zdnet.com/Ou/?p=416 


George
-----Original Message-----
From: dailydave-bounces at lists.immunitysec.com
[mailto:dailydave-bounces at lists.immunitysec.com] On Behalf Of Sebastian
Krahmer
Sent: Tuesday, January 30, 2007 6:42 AM
To: dailydave at lists.immunitysec.com
Subject: [Dailydave] Vista speach recognition


Hi,

I am in no way an Win expert but recently I read that vista will support
commands as they are spoken by the user.
What about websites where the browser is playing wav or similar audio files
upon visiting? what if they contain spoken commands? An exploit audio file
which speaks something like 'open shell' would be cool, eh?

Sebastian


--
~
~ perl self.pl
~ $_='print"\$_=\47$_\47;eval"';eval
~ krahmer at suse.de - SuSE Security Team
~

_______________________________________________
Dailydave mailing list
Dailydave at lists.immunitysec.com
http://lists.immunitysec.com/mailman/listinfo/dailydave