The CFPlugIn in Core Foundation framework in Mac OS X allows user supplied libraries to be loaded, which could allow local users to gain privileges.
https://exchange.xforce.ibmcloud.com/vulnerabilities/17291
http://www.securityfocus.com/bid/11135
http://www.kb.cert.org/vuls/id/704110
http://www.ciac.org/ciac/bulletins/o-212.shtml