CVE-2008-0984: Miro Player

High severity, CVSS 9.3. EPSS: 15.3% chance of exploitation in the next 30 days.

The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.

Affected products

• Miro Miro Player: up to and including 1.1
• Videolan Vlc Media Player: up to and including 0.8.6d

Published 2008-02-26. Last modified 2026-06-16.