Closed Bug 144629 Opened 22 years ago Closed 22 years ago

Downloads RealAudio link as an exe file and tries to execute it

Categories

(SeaMonkey :: Download & File Handling, defect)

x86
Windows 2000
defect
Not set
major

Tracking

(Not tracked)

VERIFIED DUPLICATE of bug 116938

People

(Reporter: bubba, Assigned: bugzilla)

References

()

Details

From Bugzilla Helper: User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.9) Gecko/20020311 BuildID: 2002031104 When I clicked on the URL (which is a link to a RealAudio file via Barnes&Noble), and got the Download dialog box, where I selected "Open with RealPlayer". Mozilla downloaded the link as an exe file and tried to execute the exe file instead of opening up realplayer. The exe file only contained the actual link to the .ra file, so there was really no harm done, but why did it download it instead as an .exe file instead of an .ra file? In playing with this some more, the dialog box title says "Downloading 'hurlPNM.exe'", so I would assume that the URL string isn't being parsed properly. Seems like a pretty big security hole to me. Reproducible: Always Steps to Reproduce: 1. Visit http://music.barnesandnoble.com/search/product.asp?userid=3D8MW79D7O&ean=18777221849 2. Click on one of the song links to listen 3. In the download dialog box, select the "Open with RealPlayer" option. Actual Results: You'll get a DOS window in the background when the OS tried to execute the file and a dialog box titled "Windows 16bit subsystem" with an error of "The NTVDM CPU has encountered an illegal error..." Expected Results: Not executed an exe at all. I expected RealPlayer to fire up.
Jeff, if you get a more recent copy of Mozilla you'll find this has been fixed. if you agree with this duplicate, please mark it as VERIFIED. thanks *** This bug has been marked as a duplicate of 116938 ***
Status: UNCONFIRMED → RESOLVED
Closed: 22 years ago
Resolution: --- → DUPLICATE
marking verified as a duplicate. if you decide to reopen this bug, please clarify why. search string for bugspam removal: SalviaGuaranitica
Status: RESOLVED → VERIFIED
Product: Browser → Seamonkey
You need to log in before you can comment on or make changes to this bug.