Rediff Bol’s ActiveX control allows a webpage to read the user’s Windows Address Book (WAB) contacts. Version 7.0 is affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39823/rediffbol70.txt
Source: https://packetstormsecurity.com/files/39823/rediffbol70.txt.html