CVE-2007-0675 describes a critical vulnerability in a specific ActiveX control within sapi.dll (Speech API) in Microsoft Windows Vista. When the Speech Recognition feature is active, this flaw allows user-assisted remote attackers to delete arbitrary files and perform other unauthorized actions. This is achieved through a malicious web page containing an embedded sound object that issues voice commands to an enabled microphone, thereby interacting with Windows Explorer. The vulnerability carries a CVSS score of 7.6, indicating high severity due to its network attack vector, high access complexity, and complete confidentiality, integrity, and availability impacts. Despite its potential for significant damage, there is no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for CVE-2007-0675 are minimal, with no mentions across social media or news articles. This suggests a lack of public attention or awareness regarding this particular vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_vista:*:*:32_bit:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:H/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.