WinRAR has a major security bug