239640 - Security hole when attempting to view target download directory.

Status: RESOLVED DUPLICATE of bug 211894

(SeaMonkey :: Download & File Handling, defect)

Description

[Joel]

User-Agent:       Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.6) Gecko/20040113
Build Identifier: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.6) Gecko/20040113

After downloading a file to directory, I attempted to view the directory the
file was placed in.  Instead of opening the folder, the a program with the same
name as the directory was executed.

For example, I downloaded a wav to C:\Windows\Temp\f.wav with the Download
Mananger, then I clicked "Show File Location".  Instead of opening the folder
C:\Windows\Temp, the Download Mananger opened C:\Windows\Temp.com (a program I
created a long time ago).

Please fix this error.

Reproducible: Always
Steps to Reproduce:
1. Make sure you temporary directory is set to C:\Windows\Temp
2. Create an executible (or probably even a batch file) named temp.com.
3. Download something to C:\Windows\Temp using the download mananger.
4. Click Show File Location.

Actual Results:  
It displayed the output of a DOS program I wrote that read "Girls should wear no
clothes!" in a DOS box.

Hey, I was showing off my magical ASM powers, OK?

Expected Results:  
Opened the folder C:\Windows\Temp in an Explorer Window.

You can probably fix this error by adding a dot after the directory name.  Ex: 
C:\Windows\Temp.

I'm setting this to Major becausee I believe this could be used to compromise
some systems along with another vonoribility.  Don't get me wrong, I don't know
of any other vonoribility, I just think that it's possible for someone to
exploit this someday.

about:buildconfig

Build platform
target
i586-pc-msvc

Build tools
Compiler 	Version 	Compiler flags
$(CYGWIN_WRAPPER) cl 	12.00.8804 for 80x86 	-TC -nologo -W3 -nologo -Gy
-Fd$(PDBFILE)
$(CYGWIN_WRAPPER) cl 	12.00.8804 for 80x86 	-TP -nologo -W3 -nologo -Gy
-Fd$(PDBFILE)

Configure arguments
--disable-debug --enable-optimize --enable-crypto --disable-auto-deps
--with-extensions=all --without-system-jpg --without-system-zlib

Comment 1

[Christian :Biesinger (don't email me, ping me on IRC)]

*** This bug has been marked as a duplicate of 211894 ***