vade79 has discovered a vulnerability in Finder, which can be exploited by malicious, local users to perform certain actions on a vulnerable system with escalated privileges.

The vulnerability is caused due to ".DS_Store" files being created insecurely. This can be exploited via a malicious hard link to overwrite arbitrary files with the privileges of the user running Finder.

The vulnerability has been confirmed in Finder version 10.3.2 on Mac OS X version 10.3.7. Other versions may also be affected.

Solution
Apply Security Update 2005-005.

Provided and/or discovered by
vade79

Changelog
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers