My GetRight is a free, easy to use member of the Getright download manager software family for MS Windows. My Getright features an option to customize its look while downloading.
Remote websites can even send the program skins to use during the session.
There exists a problem in the handling of these skin files that might allow for a malicious website operator to stealthy upload files to anywhere on a user's system and even overwrite existing ones. A customized look during a download can easily be created through the use of a .dld file, which holds the skin-data and which should be placed in the same directory as the files that are to be downloaded. This file uses a Windows .INI format with simple fields containing information about graphics locations, download descriptions etc. By filling these fields with long strings of random data the client-skin will be incorrectly parsed, which will cause the GUI to die permanently while the program itself keeps on downloading. Another effect of this is that the client will no longer display informative messages of any kind.