2 ms·

> the bugs that are utilized by worms Which is why I said an email attachment. The average virus relying on user interaction doesn't need bugs.

• majewsky 9y ago
  It doesn't need a code execution bug, but it usually needs some sort of privilege escalation bug.
  • qb45 9y ago
    Simple viruses will just email themselves to all your contacts and steal your banking password, no special privileges are required for that.
  • cwyers 9y ago
    But that bug doesn't have to be in Windows. If you can get privilege escalation in a Windows app that the user trusts (hello, Office), then you're in. ReactOS is based on Windows circa XP and doesn't implement UAC, so that vulnerability is wide open.