Interesting People mailing list archives
Re: Best. Vista. exploit. ever!
From: David Farber <dave () farber net>
Date: Fri, 9 Feb 2007 14:31:01 -0500
Begin forwarded message: From: Ross Stapleton-Gray <ross () stapleton-gray com> Date: February 9, 2007 2:04:24 PM EST To: dave () farber net, Ethan Ackerman <eackerma () u washington edu> Subject: Re: [IP] Best. Vista. exploit. ever! At 09:30 AM 2/9/2007, David Farber wrote:
The SANS blog has a nice summary of an innovative exploit in MS Vista's speech recognition implementation - a malicious audio file can be used to give user-level control. It does so not in the usual buffer overflow or mileading header corruptions, but by actual voice recognition of spoken scripting commands.
I'd like to nominate "Soupy Sales Attack" as an identifier for this exploit, evoking the comedian's famous stunt, where he asked kids watching his show to raid their parents' purses and wallets: http:// www.snopes.com/radiotv/tv/soupy1.htm
Ross ---- Ross Stapleton-Gray, Ph.D. Stapleton-Gray & Associates, Inc. http://www.stapleton-gray.com http://www.sortingdoor.com ------------------------------------------- Archives: http://archives.listbox.com/247/ Powered by Listbox: http://www.listbox.com
Current thread:
- Best. Vista. exploit. ever! David Farber (Feb 09)
- <Possible follow-ups>
- Re: Best. Vista. exploit. ever! David Farber (Feb 09)
- Re: Best. Vista. exploit. ever! David Farber (Feb 09)