Is uploading/download executable files harmful in drupal?
You'll want to make sure that your server is not configured to execute files of the given extensions in any way.

As a general precaution, you might also configure that file field to use the Private file system, which allows access to those files to be controlled by Drupal's permissioning system.