An attacker exploits actual code of an application and uses a security hole to carry out an attack before the application vendor knows about the vulnerability....