CVE ID:	CVE-2008-6996
Description:	Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service (disk consumption) or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask where to save each file before downloading" setting.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-6996 BugTraq ID: 31000 http://www.securityfocus.com/bid/31000 Bugtraq: 20080902 Google Chrome Automatic File Download (Google Search) http://www.securityfocus.com/archive/1/495942/100/0/threaded Bugtraq: 20080903 RE: Google Chrome Automatic File Download (Google Search) http://www.securityfocus.com/archive/1/495959/100/100/threaded Bugtraq: 20080903 RES: Google Chrome Automatic File Download (Google Search) http://www.securityfocus.com/archive/1/495951/100/100/threaded Bugtraq: 20080903 Re: Google Chrome Automatic File Download (Google Search) http://www.securityfocus.com/archive/1/495954/100/100/threaded Bugtraq: 20080904 Re: Google Chrome Automatic File Download (Google Search) http://www.securityfocus.com/archive/1/495987/100/0/threaded Bugtraq: 20080906 Google Chrome Auto download exploit .. (Google Search) http://www.securityfocus.com/archive/1/496049 Bugtraq: 20080906 Re: RES: Google Chrome Automatic File Download (Google Search) http://www.securityfocus.com/archive/1/496048/100/100/threaded https://www.exploit-db.com/exploits/6355 http://www.osvdb.org/48261 XForce ISS Database: googlechrome-file-download(44904) https://exchange.xforce.ibmcloud.com/vulnerabilities/44904