Is there a CVE? I'm not sure I understand, and this article only serves to confuse. Consider this line, at the beginning:

> In this attack, the target would not need to goof up — open an attachment or download a file that's corrupt.

Is this line simply erroneous?