The CFPlugIn in Core Foundation framework in Mac OS X allows user supplied libraries to be loaded, which could allow local users to gain privileges.Referenceshttp://www.securityfocus.com/bid/11135http://www.auscert.org.au/render.html?it=4363http://www.kb.cert.org/vuls/id/704110http://secunia.com/advisories/12491/http://www.auscert.org.au/render.html?it=4363https://exchange.xforce.ibmcloud.com/vulnerabilities/17291http://www.ciac.org/ciac/bulletins/o-212.shtml