except that 1. it's not intentional 2. no social engineering is necessary to exploit it and 3. it's not so easy to (properly) fix it. you'll have to rewrite some shoddy '90-style c++ code with 0 test coverage code from scratch. and oh I forgot 4. there's no buffer, either.