Bugtraq: RES: Google Chrome Automatic File Download

["DIOGO LEAL CHAGAS" <diogo.chagas () csn com br>]

To "fix" this "problem":

In Google chrome
Tools -> Options -> Minor Tweaks (tab) in download location: check the "ask where to save each file before downloading"

Diogo

De: nerex () live com [mailto:nerex () live com] 
Enviada em: terça-feira, 2 de setembro de 2008 19:58
Para: bugtraq () securityfocus com
Assunto: Google Chrome Automatic File Download

Google's Chrome (BETA) allows files (e.g. executable files) to be automatically downloaded to the user's computer 
without any user prompt.

 

To check the flaw, open a URL that points to an executable file.

 

nerex

----------
Esta mensagem pode conter informacoes confidenciais e/ou privilegiadas. 
Se voce nao for o seu destinatario, favor comunicar imediatamente ao remetente e destruir todas as informacoes e suas 
copias.

This message may contain information which is confidential and/or privileged. 
If you are not the intended recipient, please advise the sender immediately and destroy it and all copies.