Launchpad.net

CVE 2017-5330

ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to associated applications.

See the CVE page on Mitre.org for more details.