mspaint.exe is quite likely to have at least one code execution vulnerability if one opens a malicious file, but I bet it's very safe against remote attack :)