Apple’s brand new QuickTime 7 and the underlying Quarz Composerleaks personal information if you view a manipulated .mov film. Information leakage might not be the worst security vulnerability but the leaked information like local usernames, IP address, volume names or OS version can then be used to further exploit the target machine.
Details can be found here along with a demo of the vulnerability.
