"Strictly speaking, that code is not an exploit or zero-day code. It’s only a denial of service code," Han added. "It causes BSOD to our product, but we analyze it and it’s not easy to execute any extra payload by attack code."