CVE-2007-4489: Ecentrex Voip Client Module

Medium severity, CVSS 6.8. EPSS: 4.6% chance of exploitation in the next 30 days.

Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote attackers to execute arbitrary code via a long Username argument to the ReInit method.

Affected products

• Ecentrex Voip Client Module: any version

Published 2007-08-22. Last modified 2026-06-16.