A bug allowed hackers to inject DLLs without user interaction, gaining access to the underlying system.