The kernel in Apple Mac OS X before 10.6.2 does not properly handle task state segments which allows local users to gain privileges cause a denial of service (system crash) or obtain sensitive information via unspecified vectors.