CVE-2008-2910 — Buffer overflow in the DXTTextOutEffect ActiveX control (aka the Text-Effect DXT Filter), as distributed in TextOut.dll 6.0.18.1 and mvtextout.dll, in muvee autoProducer 6.0 and 6.1 allows remote attackers to execute arbitrary code via a long FontSetting property value

Back Back to CVE browser

HIGH

Buffer overflow in the DXTTextOutEffect ActiveX control (aka the Text-Effect DXT Filter), as distributed in TextOut.dll 6.0.18.1 and mvtextout.dll, in muvee autoProducer 6.0 and 6.1 allows remote attackers to execute arbitrary code via a long FontSetting property value

Published Jun 30, 2008

9.3

HIGH

CVSS 2.0

EPSS 9.30%

Description

Buffer overflow in the DXTTextOutEffect ActiveX control (aka the Text-Effect DXT Filter), as distributed in TextOut.dll 6.0.18.1 and mvtextout.dll, in muvee autoProducer 6.0 and 6.1 allows remote attackers to execute arbitrary code via a long FontSetting property value.

Affected products

Remediation

No remediation recorded yet.

Metrics

9.30% 0.09297

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.09297

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (11 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	9.30% (0.09297)	95.23th	v5 (v2026.06.15)
Jun 15, 2026	9.30% (0.09297)	94.71th	v5 (v2026.06.15)
Mar 17, 2025	7.71% (0.07713)	91.30th	v4 (v2025.03.14)
Dec 17, 2024	15.67% (0.15671)	95.89th	v3 (v2023.03.01)
Jan 9, 2024	20.93% (0.20928)	95.95th	v3 (v2023.03.01)
Oct 28, 2023	23.77% (0.23772)	96.04th	v3 (v2023.03.01)
Sep 24, 2023	10.68% (0.10683)	94.38th	v3 (v2023.03.01)
Mar 7, 2023	7.84% (0.07837)	93.16th	v3 (v2023.03.01)
Mar 6, 2023	7.44% (0.07437)	92.66th	v2 (v2022.01.01)
Apr 1, 2022	7.44% (0.07437)	91.94th	v2 (v2022.01.01)
Feb 4, 2022	7.44% (0.07437)	80.87th	v2 (v2022.01.01)

Weaknesses (1)

CWE-119

Buffer Overflow

References (4)

http://secunia.com/advisories/30696
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/29693
vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/43036
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/5793
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://secunia.com/advisories/30696		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/29693		vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/43036		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/5793		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 30, 2008

Updated Aug 7, 2024

Reserved Jun 30, 2008

Link CVE-2008-2910

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2008-2910

Red Hat

Severity n/a

Public date n/a

Links CVE-2008-2910