VulnerabilityModified
CVE-2007-4489
Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote attackers to execute arbitrary code via a long Username argument to the ReInit method.
MEDIUM 6.8EPSS 4.65%
Does this matter?
Lower severity and a low EPSS score (4.65%). Track it; it rarely justifies an emergency change on its own.
Description
Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote attackers to execute arbitrary code via a long Username argument to the ReInit method.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 4.65% probability · 91th percentile
- CISA KEV
- Not listed
- Affected
- ecentrex/voip client module
- Source
- cve@mitre.org
References
- http://osvdb.org/37738
- http://secunia.com/advisories/26525
- http://www.securityfocus.com/bid/25383Exploit
- http://www.securitytracker.com/id?1018596
- http://www.vupen.com/english/advisories/2007/2954
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36129
- https://www.exploit-db.com/exploits/4299
- http://osvdb.org/37738
- http://secunia.com/advisories/26525
- http://www.securityfocus.com/bid/25383Exploit
- http://www.securitytracker.com/id?1018596
- http://www.vupen.com/english/advisories/2007/2954
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36129
- https://www.exploit-db.com/exploits/4299
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.