LaunchServices in Apple OS X prior to 10.10.3 allows local users to cause a denial of service (Finder crash) via crafted localization data.
apple mac os x