Comment by jasonjayr

So attackers don't have to craft specially corrupted files? They can just include the code to perform the attack in the data file itself?