A vulnerability in Winzip allows attackers to inject arbitrary code with manipulated archives. An update corrects this.