ACE (compressed file format)

ACE
Filename extension	.ace
Internet media type	application/x-ace-compressed
Developed by	e-merge GmbH
Type of format	data compression

In computing, ACE is a proprietary data compression archive file format developed by Marcel Lemke, and later bought by e-merge GmbH. The peak of its popularity was 1999–2001, when it provided slightly better compression rates than RAR, which has since become more popular.

WinAce

Main page: Software:WinAce

WinAce, maintained by e-merge GmbH, is used to compress and decompress ACE files under Microsoft Windows. When installed, it lets the user choose between paying for a registration or installing WhenU SaveNow adware. e-merge GmbH also produces a Commandline ACE for DOS; and a freeware command-line interface decompression tool for Linux (i386) and macOS called "Unace". e-merge GmbH also provides several libraries for developers, including a freeware decompression DLL called "unace.dll". Some third-party archivers can read the format using this DLL. None of the above is open source free software.

On November 23, 2007, version 2.69 of WinACE was released, including a less-intrusive adware application, MeMedia AdVantage, which replaces WhenU. No other major changes are in this release.

Other implementations

An older version of an Unace 1.2b is free software and licensed under the GPL by the author Marcel Lemke, but it cannot extract ACE archives from version 2.0 and newer.^[1]

A newer version of Unace 2.5 that supports ACE 2.0 archives is available under a restrictive source available license, also by Marcel Lemke.^[2]

An older, independent C implementation is part of XAD-Master libxad by Dirk Stöcker. It is limited to unpacking ACE 1.0 archives.

Since 2017, there is a BSD licensed python module and CLI utility by Daniel Roethlisberger, that supports unpacking of ACE 2.0 format archives.^[3]

Third-party support

Packing of ACE files is licensed as proprietary information and only available through WinACE, while unpacking of ACE files is supported by a number of third-party archivers. However, virtually all of them (the ones that support ACE 2.x format) do this by using the proprietary "unace.dll" from e-merge GmbH.

Use for malware distribution

Since at least 2015, ACE archives have been used to deliver malware to victims by e-mail. This tactic was viable because popular archiving software was able to uncompress ACE archives, but support for the ACE format in security products such as mail filters, web content filters, and anti-virus software was generally weak.^[4]^[5]^[6]

Security vulnerabilities

In February 2019 several major security vulnerabilities were found in the unacev2.dll library which is used by WinRAR and other archiving products. Since WinACE support is discontinued, users are advised against opening ACE archives in WinRAR and possibly other products using this library.^[7] WinRAR stopped supporting ACE as of version 5.70, and similar products are following suit.

External links

References

0.00

(0 votes)

Original source: https://en.wikipedia.org/wiki/ACE (compressed file format). Read more

[1] "unace: extract, test and view .ace archives". https://packages.debian.org/stable/utils/unace.

[2] "unace-nonfree: extract, test and view .ace archives (non-free version)". https://packages.debian.org/stable/utils/unace-nonfree.

[3] "acefile: Read/test/extract ACE 1.0 and 2.0 archives in pure python". https://pypi.python.org/pypi/acefile.

[4] "Malware sent in .ace format". 5 October 2015. http://blog.frankleonhardt.com/2015/malware-sent-in-ace-format/.

[5] "Spammers discover the 7z archive format for spreading ransomware". https://exchange.xforce.ibmcloud.com/collection/Spammers-discover-the-7z-archive-format-for-spreading-ransomware-1b8e1aad140a017769c7eba02f500747.

[6] "How to deal with .ACE malware files?". 24 January 2017. https://medium.com/@seifreed/how-to-deal-with-ace-malware-files-592eb52e7135. ^{[yes|permanent dead link|dead link}}]}

[7] "Extracting a 19 Year Old Code Execution from WinRAR" (in en-US). 2019-02-20. https://research.checkpoint.com/extracting-code-execution-from-winrar/.

[1]

[2]

[3]

[4]

[5]

[6]

[7]