I can't tell if you are playing semantic games or are just ignorant of current buffer overflow techniques used by malware authors but I'll play along: yes, your are literally correct, at some point in the process an executable is involved since data does not execute but the infection is caused...