Launch Services in Apple Mac OS X before 10.5 when Open Safe Files is enabled allows remote attackers to execute arbitrary code via a symlink attack probably related to a race condition and automatic execution of a downloaded file.