CVE-2009-0012
Heap-based buffer overflow in CoreText in Apple Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via a crafted Unicode string.
Date published : 2009-02-12
http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html