No one has figured out how to run code with this bug yet - but if they do, you can bet that someone will turn it into a computer worm.