Microsoft Windows Speech API CVE-2019-0985 Remote Code Execution Vulnerability

Bugtraq ID:	108643
Class:	Input Validation Error
CVE:	CVE-2019-0985
Remote:	Yes
Local:	No
Published:	Jun 11 2019 12:00AM
Updated:	Jun 11 2019 12:00AM
Credit:	Ke Liu of Tencent Security Xuanwu Lab.
Vulnerable:	Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft Windows Server 2008 R2 for Itanium-based Systems SP1 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows 7 for 32-bit Systems SP1
Not Vulnerable:

Microsoft Windows Speech API CVE-2019-0985 Remote Code Execution Vulnerability

Microsoft Windows Speech API is prone to a remote code-execution vulnerability.

An attacker can exploit this issue to execute arbitrary code in the context of an affected system.

Microsoft Windows Speech API CVE-2019-0985 Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Windows Speech API CVE-2019-0985 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft Windows Speech API CVE-2019-0985 Remote Code Execution Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• CVE-2019-0985 | Microsoft Speech API Remote Code Execution Vulnerability (Microsoft)