Mother of all bogosity

It's the month of Apple bugs.

I was expecting so much excitement, and yet the first two exploits are:

1. a VLC bug that's not Mac-specific
2. a QuickTime bug that doesn't even work properly on my MacBook Pro

Come on, guys! Where's the specially-crafted packet that causes a DOS on a Mac with the firewall turned on and stealth mode activated? Where's the specially-crafted webpage that allows for arbitrary code execution and privilege escalation? Are you saving the best for last?