Bugtraq mailing list archives
Re: Google Chrome Automatic File Download
From: Juha-Matti Laurio <juha-matti.laurio () netti fi>
Date: Thu, 4 Sep 2008 13:53:51 +0300 (EEST)
This issue was assigned to BID31000: http://www.securityfocus.com/bid/31000 Juha-MattiRazi Shaban [razishaban () gmail com] wrote:
On 2 Sep 2008 22:58:27 -0000, nerex () live com <nerex () live com> wrote: > Google's Chrome (BETA) allows files (e.g. executable files) to be automatically downloaded to the user's computer without any user prompt. > > To check the flaw, open a URL that points to an executable file. > > nerex > There's a huge difference between downloading and running. If a file that is unwanted is auto-downloaded, just delete it. No harm done. -- Razi
Current thread:
- Google Chrome Automatic File Download nerex (Sep 03)
- RES: Google Chrome Automatic File Download DIOGO LEAL CHAGAS (Sep 03)
- Re: RES: Google Chrome Automatic File Download Nick FitzGerald (Sep 06)
- Re: Google Chrome Automatic File Download Razi Shaban (Sep 03)
- RE: Google Chrome Automatic File Download James C. Slora Jr. (Sep 03)
- <Possible follow-ups>
- Re: Google Chrome Automatic File Download Juha-Matti Laurio (Sep 04)
- RES: Google Chrome Automatic File Download DIOGO LEAL CHAGAS (Sep 03)