CVE-2016-2108 in Mac OS X
Sumário
de MITRE
The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafted serialized data, aka the "negative zero" issue.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.