A remote code execution vulnerability exists when the Microsoft Speech API (SAPI) improperly handles text-to-speech (TTS) input. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. To exploit the vulnerability, an attacker would need to convince a user to open a specially crafted document containing TTS content invoked through a scripting language. The update address the vulnerability by modifying how the system handles objects in memory.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Msft | — | 2019-06 Security Only Quality Update for Windows Embedded Standard 7 for x64-based Systems (KB4503269)2019-06 Security Only Quality Update for Windows 7 for x86-based Systems (KB4503269)2019-06 Security Only Quality Update for Windows 7 for x64-based Systems (KB4503269)2019-06 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB4503269)2019-06 Security Only Quality Update for Windows Embedded Standard 7 for x86-based Systems (KB4503269)2019-06 Security Only Quality Update for Windows Server 2008 R2 for Itanium-based Systems (KB4503269) | Jun 11, 2019 | Jun 11, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub