Driver bug would allow anyone with physical access to compromise a PC by using exploit code loaded onto a USB storage device.