I remember when I discovered a remote ICQ buffer overflow in high school. I didn't have the skills to gain code execution at the time, but I created an app that could DoS and crash the client of anyone, if I knew their username.