RE: Download Managers

[<Leonard.Ong () nokia com>]

Hello,

Getright, like other download manager may include spyware, which only removable after registering it.  During the time 
between the program installed and the actual registration period (ad removal), it is enough to pose a security risk.

Let see, you have downloaded the shareware and installed as a trial.  The spyware would be installed at this point of 
time, and may or may not be removed.  it is depending on the vendor, if they are honestly providing removal 
instruction, and/or if the spyware/trojan has done anything harmful before removed.

Leonard


-----Original Message-----
From: ext Vlad Tsyrklevich [mailto:vlad () zoomstats org]
Sent: Thursday, February 27, 2003 8:27 AM
To: Leon Pholi
Cc: security-basics () securityfocus com
Subject: Re: Download Managers


Leon Pholi writes: 

> Hi,

Hi. 

> Just wondering on thoughts about download managers- do they pose are
> security risk? Any known to be trojaned? The one I use is GetRight, does
> anyone know if this one has known security issues?

I've heard good things about GetRight just so you know :-). I doubt it has 
any remote hole other then perhaps a buffer overflow in the length of a file 
name but I highly doubt that. The only security hole it might have is an 
accidental one (and this applies to all programs) but again as I said, I 
highly doubt it has one, I highly doubt few of the "big" (read: commonly 
used) have security holes/trojans because users would notice something and 
it would be found. 

 -Vlad 

 --
 -Vlad Tsyrklevich