Gadu-Gadu 7.20 allows remote attackers to eavesdrop on a user via a web page that accesses the EasycallLite.oce ActiveX control, which can initiate an outgoing phone call and listen to the microphone.
| Software | From | Fixed in |
|---|---|---|
| gadu-gadu / gadu-gadu_instant_messenger | 7.20 | 7.20.x |