CVE-2007-5857
Quick Look in Apple Mac OS X 10.5.1 does not prevent a movie from accessing URLs when the movie file is previewed or if an icon is created, which might allow remote attackers to obtain sensitive information via HREFTrack.
Date published : 2007-12-19
http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html