[Beltalowda]

So has anyone every used that as an attack vector? Some proof-of-concept code is not hard to write.

[jdsnape]

yes - see https://attack.mitre.org/techniques/T1115/ for a non-exhaustive list