Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries directly, which allows remote DNS servers to obtain potentially sensitive information about the identity of a client user via request logging, as demonstrated by a proxy server that was configured for the purpose of anonymity.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2010-02-18 18:00
Updated : 2024-02-04 17:54
NVD link : CVE-2010-0644
Mitre link : CVE-2010-0644
CVE.ORG link : CVE-2010-0644
JSON object : View
Products Affected
- chrome
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor