Lucene search

K
cveMitreCVE-2008-2910
HistoryJun 30, 2008 - 6:24 p.m.

CVE-2008-2910

2008-06-3018:24:00
CWE-119
mitre
web.nvd.nist.gov
24
cve-2008-2910
buffer overflow
dxttextouteffect
activex control
remote code execution
fontsetting property

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.209

Percentile

96.4%

Buffer overflow in the DXTTextOutEffect ActiveX control (aka the Text-Effect DXT Filter), as distributed in TextOut.dll 6.0.18.1 and mvtextout.dll, in muvee autoProducer 6.0 and 6.1 allows remote attackers to execute arbitrary code via a long FontSetting property value.

Affected configurations

Nvd
Node
muveeautoproducerMatch6.0
OR
muveeautoproducerMatch6.1
VendorProductVersionCPE
muveeautoproducer6.0cpe:2.3:a:muvee:autoproducer:6.0:*:*:*:*:*:*:*
muveeautoproducer6.1cpe:2.3:a:muvee:autoproducer:6.1:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.209

Percentile

96.4%

Related for CVE-2008-2910