CVE-2007-4489

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-08-22 · updated 2026-06-16

Description

Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote attackers to execute arbitrary code via a long Username argument to the ReInit method.

Affected products

Ecentrex Voip Client Module: all versions

References

http://osvdb.org/37738
http://secunia.com/advisories/26525
http://www.securityfocus.com/bid/25383
http://www.securitytracker.com/id?1018596
http://www.vupen.com/english/advisories/2007/2954
https://exchange.xforce.ibmcloud.com/vulnerabilities/36129
https://www.exploit-db.com/exploits/4299
http://osvdb.org/37738
http://secunia.com/advisories/26525
http://www.securityfocus.com/bid/25383
http://www.securitytracker.com/id?1018596
http://www.vupen.com/english/advisories/2007/2954

Get alerted when CVE-2007-4489 or the next vulnerability affects your stack