I don't understand this comment. You seem to be describing in basic terms what a remote code execution vulnerability is. What does that have to do with the comment you're replying to?