Please can someone elaborate on claim: "… is pretty simple to convert into remote code execution"? Especially the "pretty simple" bit.