It's in the executive summary that it's not wormable on its own: > An attacker must have the ability to execute code on a victim system to exploit this vulnera

It's in the executive summary that it's not wormable on its own: > An attacker must have the ability to execute code on a victim system to exploit this vulnerability.