Description
Audio in Apple OS X before 10.11.6 mishandles a size value, which allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read) via a crafted audio file.
References
- 91824 vdb-entry
- APPLE-SA-2016-07-18-1 vendor-advisory
- 1036348 vdb-entry
- https://support.apple.com/HT206903
- http://zerodayinitiative.com/advisories/ZDI-16-439/