They might not know that, so I should structure the response with a disclaimer about legal issues first. Then, perhaps guide them through finding a patch. Maybe provide steps on where to look, like forums, but also caution them about malware and security risks from third-party sites.