Vulnerabilities > CVE-2005-3892 - Unspecified vulnerability in Gadu-Gadu Instant Messenger 7.20

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
gadu-gadu

Summary

Gadu-Gadu 7.20 allows remote attackers to eavesdrop on a user via a web page that accesses the EasycallLite.oce ActiveX control, which can initiate an outgoing phone call and listen to the microphone.

Vulnerable Configurations

Part Description Count
Application
Gadu-Gadu
1