In order to successfully broadcast a fraudulent transaction, one must have a warehouse worth of computing power at his disposal, and a hell of a ton of luck.
Topic one: a 0 confirmation double spend
Topic two: a 51% attack on the Bitcoin network
Since this thread is about confirmations and not about network attacks I will not address a 51% attack here except to fix your comment and say it does not belong in this thread:
Now, fixing the rest of your comment:
A double/multiple spend is very simple if you have two or more vendors that accept your BTC with zero confirmation and instantly ship you the product. Here is how you do it:
You have an unspent output of 1 BTC
You send it to the first vendor's address, they accept the coin with 0 confirmations and ship you the product.
Now you have about 10 minute before the transaction is put in a block and gets the first confirmation
So, you simply log into the second vendor site and send the same coin to them, they also accept the coin with no confirmation and send you the product.
See? You can spend that same coin as many times as you want.
Eventually one of the spends will get confirmed and all the other spends of the same coin will get dropped.
One vendor will get paid, all the rest are screwed because they have shipped the product and got nothing for it.
Will the first transaction get a conformation of some random one? If its the first on then simply send it to yourself first and the to other vendors so that you can keep your coin too!