CVE-2005-3892: Gadu-Gadu Instant Messenger

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Gadu-Gadu 7.20 allows remote attackers to eavesdrop on a user via a web page that accesses the EasycallLite.oce ActiveX control, which can initiate an outgoing phone call and listen to the microphone.

Affected products

• Gadu-Gadu Gadu-Gadu Instant Messenger: version 7.20 only

Published 2005-11-29. Last modified 2026-06-16.