Looking at the linked article, it appears that this exploit can work if you just rename an ACE archive so it has the *.rar extension, since WinRAR “detects the format by the content of the file and not by the extension.” So the end user wouldn’t even necessarily know that they were opening an ACE archive.