Buffer overflow in the Foundation framework for Mac OS X 10.3.9 allows local users to execute arbitrary code via a long environment variable.
http://www.us-cert.gov/cas/techalerts/TA05-136A.html
http://www.kb.cert.org/vuls/id/582934
http://lists.apple.com/archives/security-announce/2005/May/msg00001.html