448536 - When Switching tabs Right before a download, the download automatically accepts

Status: RESOLVED WORKSFORME

(Toolkit :: Downloads API, defect)

Description

[Kyle]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1

I was in the process of downloading some portable apps files from 

http://portableapps.com/apps

And I used the middle click to open the app info page (The one i chose when this happened was Miranda IM portable)
Then i clicked download. This redirected me to 

http://sourceforge.net/project/downloading.php?groupname=portableapps&filename=Miranda_Portable_0.7.8.paf.exe&use_mirror=osdn

As you probably know, The source forge page waits around 3 seconds before it starts downloading the item, so i tabbed back to Portableapps.com.
I believe i did this exactly as the download prompt was coming up, because i noticed that "Miranda_Portable_IM" had already started downloading in my Downloadstatus bar.

I Trust items from this website, but a little known fact is windows has some EXE Files that it downloads and automatically executes, and if this error had occurred with a virus type of file, it could compromise the security of Firefox and Windows XP

Reproducible: Couldn't Reproduce

Steps to Reproduce:
1.
2.
3.




I dont know if my Addons were relevant, but i will list them for you anyway

Adblock plus
Aging tabs
Controle de scripts
Download statusbar
Flagfox
Flashblock
Forecast Fox
Google Toolbar
Link alert
Logmein, inc. Remote access plugin   (for remote viewing of my home computer)
Save session
SpeedDial
Stealther
US English Dictionary
Work offline
Yahoo Mail notifier

Comment 1

[Daniel Veditz [:dveditz]]

Couldn't reproduce, what keystrokes are you using to switch tabs (there are various ways)? If it's a timing issue this could be really tough, but I can't see how any tab-switching keystroke would be accepted as a click on the Save button (or an enter/space key).

I'm not aware of any .exe files that modern windows (WinXP or Vista) will automatically execute, do you have any references on that?

Comment 2

[Kyle]

My bad. I read the news forum wrong.

I was reading an article similar to this one on google news a couple weeks back,
and i Didnt notice that it said secondary attack.
http://apple.slashdot.org/article.pl?sid=08/05/31/1214254


As for the switching tabs, I just clicked the first tab. They were the only two open.
However i neglected to mention i had music playing, and i have norton installed on my computer, So my computer was taxed for cpu usage at the time.

Comment 3

[Lucas Adamski [:ladamski]]

Unable to reproduce.