Heap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to execute arbitrary code via a large header block in an ARJ archive.
secunia.com/advisories/17251
secunia.com/secunia_research/2005-67/advisory/
securityreason.com/securityalert/479
securitytracker.com/id?1015672
www.osvdb.org/23383
www.securityfocus.com/archive/1/425894/100/0/threaded
www.securityfocus.com/bid/16786
www.vupen.com/english/advisories/2006/0709
exchange.xforce.ibmcloud.com/vulnerabilities/24872