This issue was assigned to BID31000:
http://www.securityfocus.com/bid/31000

Juha-Matti

Razi Shaban [razishaban (at) gmail (dot) com [email concealed]] wrote:
> On 2 Sep 2008 22:58:27 -0000, nerex (at) live (dot) com [email concealed] <nerex (at) live (dot) com [email concealed]> wrote:
> > Google's Chrome (BETA) allows files (e.g. executable files) to be automatically downloaded to the user's computer without any user prompt.
> >
> > To check the flaw, open a URL that points to an executable file.
> >
> > nerex
> >
>
> There's a huge difference between downloading and running. If a file
> that is unwanted is auto-downloaded, just delete it. No harm done.
>
>
> --
> Razi
>

[ reply ]