Apple has issued a security update for Mac OS X, which fixes two vulnerabilities.

1) An invalid type conversion when rendering frame sets in WebKit can be exploited to corrupt memory and can be exploited to execute arbitrary code when a user visits a malicious website.

2) An input validation error in the processing of headers passed to the "XMLHttpRequest" object in WebCore can be exploited to inject arbitrary HTTP requests.

Solution
Apply Security Update 2007-006.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) The vendor credits Rhys Kidd, Westnet
2) Richard Moore, Westpoint Ltd.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Apple:
http://docs.info.apple.com/article.html?artnum=305759

Westpoint Ltd.:
http://www.westpoint.ltd.uk/advisories/wp-07-0002.txt

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers