A vulnerability has been reported in Aperture and iPhoto, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the processing of DNG (Adobe Digital Negative) image files and can be exploited to cause a stack-based buffer overflow via a specially crafted file.

Successful exploitation may allow execution of arbitrary code.

The vulnerability has been reported in Aperture 2 and iPhoto 7.1.2 with iLife Support 8.2.

Solution
Apply patch.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Clint Ruoho, Laconic Security.

Original Advisory
Apple:
http://support.apple.com/kb/HT1232

Deep Links
Links available in Customer Area