7-Zip: From Uninitialized Memory to Remote Code Execution
7-Zip needs to start a Go Fund Me or similar for a Code Signing certificate. They're like $69-89/year, which is expensive, but for such a popular piece of software it would be a nice safety net in case of site compromise.Too bad none of the big CAs have an Open Source/Charity program that would provide a Authenticode Certificate for use with that software.