these are directions on how to make your own exploit for this, so you are certain what's in the files, the link on secunia is just a launch command for calculator.app, and on another link in slashdot for Heiser-something was just a jpg that did ls -al and echo "some german message"
no subject
http://apple.slashdot.org/comments.pl?sid=178068&cid=14767986