Gadu-Gadu 7.20 allows remote attackers to eavesdrop on a user via a web page that accesses the EasycallLite.oce ActiveX control, which can initiate an outgoing phone call and listen to the microphone.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Gadu-gadu_instant_messenger | Gadu-gadu | 7.20 (including) | 7.20 (including) |