Google's Chrome (BETA) allows files (e.g. executable files) to be automatically downloaded to the user's computer without any user prompt.
To check the flaw, open a URL that points to an executable file.
nerex