Well, yes, all software RCEs can be avoided by turning off the software. With this, people were able to send arbitrary code to a connected server. They could t

Well, yes, all software RCEs can be avoided by turning off the software. With this, people were able to send arbitrary code to a connected server. They could then make the server send arbitrary code down to every connected client. The infected clients could snoop for various data, and then do the same thing in reverse, returning the data to the devious user.