Description
Gadu-Gadu 7.20 allows remote attackers to eavesdrop on a user via a web page that accesses the EasycallLite.oce ActiveX control, which can initiate an outgoing phone call and listen to the microphone.
References
- 21020 vdb-entry
- 15520 vdb-entry
- 20051121 Gadu-Gadu several vulnerabilities (version <= 7.20) mailing-list
- 17597 third-party-advisory
- 20051121 Gadu-Gadu several vulnerabilities (version <= 7.20) mailing-list