Multiple buffer overflows in AFP Client in Apple Mac OS X 10.4.11 and 10.5.2 allow remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted afp:// URL.

More... (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-0044)