They could double click on a file, or go to a URL that somebody sent them in an mail.” Sutton has not yet seen anyone publicly release software that could take advantage of any of the four bugs, but ...