LaunchServices in Apple OS X prior to 10.10.3 allows local users to gain privileges via a crafted localized string, related to a "type confusion" issue.
apple mac os x