CreateProcess() for Windows, and system() for Unix. This result
is being reported because it is the most concrete example of
how API functions might play a role in implementation-level
vulnerabilities.