[jwilk]

> http://seclists.org/fulldisclosure/2015/Sep/106

This is not a vulnerability:

https://www.rarlab.com/vuln_sfx_html.htm