zlib in the Compression component in Apple iOS prior to 9.2, OS X prior to 10.11.2, tvOS prior to 9.1, and watchOS prior to 2.1 does not initialize memory for an unspecified data structure, which allows remote malicious users to execute arbitrary code via a crafted web site.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
apple iphone os |
||
apple mac os x |
||
apple watchos |
||
apple tvos |