TrueConf Server (5.3.x < 5.3.9, 5.4.x < 5.4.9, 5.5.x < 5.5.5)

TrueConf Client downloads application updates without verifying integrity, allowing a network attacker to substitute a tampered payload, leading to arbitrary code execution.