CVEvulnerability
CVE-2010-0643
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-02-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all configured proxy servers are unavailable, which allows remote HTTP servers to obtain potentially sensitive information about the identity of a client user via standard HTTP logging, as demonstrated by a proxy server that was configured for the purpose of anonymity.
Affected configurations
• google chrome (<= 4.0.249.78)
• google chrome 0.2.149.27
• google chrome 0.2.149.29
• google chrome 0.2.149.30
• google chrome 0.2.152.1
• google chrome 0.2.153.1
• google chrome 0.3.154.0
• google chrome 0.3.154.3
• google chrome 0.4.154.18
• google chrome 0.4.154.22
• google chrome 0.4.154.31
• google chrome 0.4.154.33
• google chrome 1.0.154.36
• google chrome 1.0.154.39
• google chrome 1.0.154.42
• google chrome 1.0.154.43
• google chrome 1.0.154.46
• google chrome 1.0.154.48
• google chrome 1.0.154.52
• google chrome 1.0.154.53
• google chrome 1.0.154.59
• google chrome 1.0.154.65
• google chrome 2.0.156.1
• google chrome 2.0.157.0
• google chrome 2.0.157.2
• google chrome 2.0.158.0
• google chrome 2.0.159.0
• google chrome 2.0.169.0
• google chrome 2.0.169.1
• google chrome 2.0.170.0
• google chrome 2.0.172
• google chrome 2.0.172.2
• google chrome 2.0.172.8
• google chrome 2.0.172.27
• google chrome 2.0.172.28
• google chrome 2.0.172.30
• google chrome 2.0.172.31
• google chrome 2.0.172.33
• google chrome 2.0.172.37
• google chrome 2.0.172.38
• google chrome 3.0.182.2
• google chrome 3.0.190.2
• google chrome 3.0.193.2
• google chrome 3.0.195.21
• google chrome 3.0.195.24
• google chrome 3.0.195.32
• google chrome 3.0.195.33
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://code.google.com/p/chromium/issues/detail?id=12303 code.google.com
- http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html Patch
- http://secunia.com/advisories/38545 Vendor Advisory
- http://securitytracker.com/id?1023583 securitytracker.com
- http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs Vendor Advisory
- http://www.osvdb.org/62315 www.osvdb.org
- http://www.securityfocus.com/bid/38177 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0361 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56212 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14500 oval.cisecurity.org
- http://code.google.com/p/chromium/issues/detail?id=12303 code.google.com
- http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html Patch
- http://secunia.com/advisories/38545 Vendor Advisory
- http://securitytracker.com/id?1023583 securitytracker.com
- http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs Vendor Advisory
- http://www.osvdb.org/62315 www.osvdb.org
- http://www.securityfocus.com/bid/38177 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0361 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56212 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14500 oval.cisecurity.org