But given a sufficiently complex code, you can execute from unexpected places. Sometimes even without any bugs involved: http://blog.didierstevens.com/2010/03/

But given a sufficiently complex code, you can execute from unexpected places. Sometimes even without any bugs involved: http://blog.didierstevens.com/2010/03/29/escape-from-pdf/ http://blog.didierstevens.com/2010/03/29/escape-from-pdf/