"It travels in a file called "latestpics.tgz" and only version 10.4 of OS X is vulnerable to it."
Apparently, from what I can figure out, it's really just a shell script (think Terminal) with the picture of a JPEG icon file pasted onto it. -.-;;; And it's not the first of it's kind; there's been other such things, including Opener noted here.