And for an attacker to exploit this (which in all likelihood is impossible anyways), they'd need to already be executing arbitrary code.