Mac OS X vulnerable to one-two combo attack

Two flaws, when used together, could let attackers who concoct a special Web site place a file on a Mac and then run the file through a simple browser command.