Secunia Research has discovered a vulnerability in WinACE, which can be exploited by malicious people to compromise a user’s system. The vulnerability is caused due to a boundary error when reading an overly large ARJ header block into a fixed-sized heap buffer. This can be exploited to cause a heap-based buffer overflow. Successful exploitation allows execution of arbitrary code when a malicious ARJ archive is opened. WinACE version 2.60 is affected. Earlier versions may also be susceptible.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/44171/secunia-WinACE.txt
Source: https://packetstormsecurity.com/files/44171/secunia-WinACE.txt.html