No one has figured out how to run code with this bug yet – but if they do, you can bet that someone will turn it into a computer worm.