• CVE-2012-0649
Impact: A local user may be able to execute arbitrary code with system privileges
Description: A temporary file race condition issue existed in blued's initialization routine.
Additional detail: The file in question is "/tmp/com.apple.Bluetooth.plist" and was created shortly after boot and potentially other circumstances. Under certain circumstances, the writing or creation of this file could be attacked with standard file race techniques to create or clobber files by a local attacker.
• CVE-2012-0657
Impact: A user with physical access to the computer may be able to cause Safari to launch if the screen is locked and the RSS Visualizer screen saver is used
Description: An access control issue existed in Quartz Composer's handling of screen savers. This issue is addressed through improved checking for whether or not the screen is locked.
Additional detail: The original finder of this bug is Jay Craft of GrooVault Entertainment, LLC. That is to say, when this bug was originally found and fixed, this was the original reporter. My work in finding this bug was merely to retest the issue once Lion was released. I noticed his issue was once again present. The description was defined as CAN-2005-2515 and is listed in http://support.apple.com/kb/TA23465?viewlocale=en_US&locale=en_US
Thanks to the Apple Product Security team for addressing both issues.
