This is done to prevent a malicious web page from executing existing files on a user’s computer. It also implements additional checks within the web notifier.
It is done to prevent possible attacks with inclusion of ZIP archive into the signature body.We already prohibited extracting contents of such malformed archives in WinRAR 6.01.
ZIP SFX module refuses to process SFX commands stored in archive comment if such comment is resided after beginning of Authenticode digital signature.
