See http://felinemenace.org/papers/p63-0x05_OSX_Heap_Exploitation_Technqiues.txt for a intro to this problem.

(Is it really a Cocoa topic)