204666 - Some downloads start without asking where to save, and then launch without permission

Status: RESOLVED DUPLICATE of bug 189598

(SeaMonkey :: Download & File Handling, defect)

Description

[David Campbell]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4a) Gecko/20030401
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4a) Gecko/20030401

Mozilla 1.3 & 1.4 (including latest 1.4 nightly build), in some circumstances
immediately start downloading files without any requester asking where to save
them, and on completion of the download, launches them.

Take for example winamp from http://www.winamp.com/download/ 

Mozilla downloads it to c:\Documents & Settings\david\Local
Settings\Temp\winamp3_0-full.exe.mp3 and then launches it from there in my
default mp3 player as an mp3 file (which it isn't).  Fortunately it makes a
mistake about the type of file, because if it didn't this would seem to be a
fairly major security problem.

The downloaded file IS NOT an mp3 file, rather it is an exe file, and I don't
have any idea why mozilla treats it as an mp3 file.  I don't believe the mime
type from the server is wrong.

Reproducible: Always

Steps to Reproduce:
1.  Go to http://www.winamp.com/download/
2.  Click begin download
Actual Results:  
Download begins, saving the file to a place that I did not specify.  No
requester appears.  It also saves it with a .exe.mp3 extension which is incorrect.

Expected Results:  
1.  I would not expect mozilla to save it as an mp3 file.
2.  I would expect mozilla to ask me where to save it.
3.  I would not expect mozilla to launch it without permission.

Comment 1

[Matthias Versen [:Matti]]

Have yoi configured something in edit\preferences\Navigator\Helper apps ?
(assigned to application-octet-stream)

Comment 2

[Boris Zbarsky [:bzbarsky]]

If you have application/octet-stream associated with the .mp3 extension, please
remove that association and mark this bug duplicate of bug 189598

Comment 3

[David Campbell]

Yes, somehow this had been added.  I'm sure it wasn't me - perhaps it was
another family member.

*** This bug has been marked as a duplicate of 189598 ***