Vulnerabilities

TI-2024-15750 CVE-2024-23746 · GHSA-9pp3-66w8-j42c

Miro Desktop 0.8.18 on macOS allows local Electron code injection via a complex series of…

HIGH 82

Miro Desktop 0.8.18 on macOS allows local Electron code injection via a complex series of steps that might be usable in some environments (bypass a kTCCServiceSystemPolicyAppBundles requirement via a file copy, an app.ap…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01288 Published 2024-02-02 No fix listed CWE-94

TI-2008-00940 CVE-2008-0984 · GHSA-g9w3-mq78-c86r

The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player…

MEDIUM 56

The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.15284 Published 2008-02-26 No fix listed CWE-399

Vulnerabilities

Filters

Miro Desktop 0.8.18 on macOS allows local Electron code injection via a complex series of…

The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player…