Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries directly, which allows remote DNS servers to obtain potentially sensitive information about the identity of a client user via request logging, as demonstrated by a proxy server that was configured for the purpose of anonymity.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2010-02-18 10:00
Updated : 2017-09-18 18:30
NVD link : CVE-2010-0644
Mitre link : CVE-2010-0644
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
- chrome