Multiple integer overflows in a "legacy serialization format" parser in AppKit in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code via a crafted serialized property list

More... (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-0057)