Description
Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or obtain sensitive user information via a crafted app that leverages a "type confusion."
References
- 91824 vdb-entry
- http://zerodayinitiative.com/advisories/ZDI-16-433/
- APPLE-SA-2016-07-18-1 vendor-advisory
- 1036348 vdb-entry
- https://support.apple.com/HT206903