destructive self-executing code take full advantage of bugs affecting the code of some application handling the info. You refer to a bug in just how EXIF should be processed, but the picture data also has to be taken https://mediajx.com/story20062445/jpg-exploit-no-further-a-mystery