A format string vulnerability in the handling of iPhoto XML feeds title field allows potential remote arbitrary code execution.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/53437/DMA-2007-0104a.txt
Source: https://packetstormsecurity.com/files/53437/DMA-2007-0104a.txt.html