Vulnerability Details CVE-2007-4489
Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote attackers to execute arbitrary code via a long Username argument to the ReInit method.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.213
EPSS Ranking 95.5%
CVSS Severity
CVSS v2 Score 6.8
References
- http://osvdb.org/37738
- http://secunia.com/advisories/26525
- http://www.securityfocus.com/bid/25383
- http://www.securitytracker.com/id?1018596
- http://www.vupen.com/english/advisories/2007/2954
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36129
- https://www.exploit-db.com/exploits/4299
- http://osvdb.org/37738
- http://secunia.com/advisories/26525
- http://www.securityfocus.com/bid/25383
- http://www.securitytracker.com/id?1018596
- http://www.vupen.com/english/advisories/2007/2954
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36129
- https://www.exploit-db.com/exploits/4299
Products affected by CVE-2007-4489
-
cpe:2.3:a:ecentrex:voip_client_module:*