So, the unacev2.dll ACE unpacker vulnerability.
This thing seems to have made the news and not in a nice way either. Also misleading since these typically ONLY mention WinRAR and not, say, PeaZip and all the others. Who knows how common that thing really is…?
I certainly hope that the various antimalware tools that can scan inside .ace files aren’t vulnerable to this.
https://research.checkpoint.com/extracting-code-execution-from-winrar/ says the vulnerability seems to exist in the open source (Linux and others) “unace-nonfree” package too, with a source code fragment shown and all (since it’s open source).
Well, the open source library might get a fix but since it’s a nonfree one, the fix may not be redistributable.
There’s a fully open-source and free (BSD license) unpacker for these that should be more robust, at https://pypi.org/project/acefile/ … which might in the short term become the recommended tool to use for extracting content from .ace archives, then?
Long term, should convert any data so stored into other formats.
