This is a real problem, we have to adopt exponentially safer code generation methods or reduce the absolute amount of code in use, or both. (Or we can kiss our asses goodbye.)
I remember messing with Windows 95 with IE 3 installed. It was really easy to create. NetMeeting shortcut that would crash with a buffer overflow error.