The Adobe PDF specification 1.3 as implemented by Apple Mac OS X Preview allows remote attackers to have an unknown impact possibly including denial of service (infinite loop) arbitrary code execution or memory corruption via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.