Things that Apple's OS X 10.8.3 update patched — which may allow for arbitrary code execution — that are also on the "safe" file type list used by Mac browsers: ImageIO (picture); IOAcceleratorFamily (picture); PDFKit (PDF); QuickTime (movie).



Open "safe" files after downloading… on by default.

You may wish to consider unchecking that particular box.