CVE-2007-4489: Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module a...

Security readout for executives and security teams

This is an old client-side buffer overflow in an eCentrex VOIP ActiveX component. If a vulnerable legacy workstation loads attacker-controlled content that can invoke the control, the attacker may be able to run code on that user's machine. The bundle does not identify current vendor fixes or supported product status. Exposure is likely limited to organizations with legacy Windows desktops that still have the eCentrex VOIP Client module and uacomx.ocx 2.0.1 installed and usable through ActiveX. Modern environments without Internet Explorer or ActiveX workflows are less likely exposed, but old call-center or telephony workstations need verification. Treat this as a legacy exposure cleanup item with high impact if present. It should not outrank actively exploited KEV issues unless the vulnerable client is confirmed on business-critical desktops, especially where users browse external content or use old telephony workflows. Mitigation focus: Inventory endpoints for eCentrex VOIP Client and uacomx.ocx 2.0.1.; Remove the legacy client where it is no longer required.; Disable the vulnerable ActiveX control where business use is not required..

Prepared

Jun 29, 2026, 03:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.