Google's Chrome (BETA) allows files (e.g. executable files) to be automatically downloaded to the user's computer without any user prompt.

To check the flaw, open a URL that points to an executable file.

nerex