CVE-2010-0644: Infoleak
Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries directly, which allows remote DNS servers to obtain potentially sensitive information about the identity of a client user via request logging, as demonstrated by a proxy server that was configured for the purpose of anonymity.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0644?
CVE-2010-0644 has a moderate severity level due to the potential exposure of sensitive information through direct DNS queries.
How do I fix CVE-2010-0644?
To fix CVE-2010-0644, update Google Chrome to version 4.0.249.89 or later.
What versions of Google Chrome are affected by CVE-2010-0644?
CVE-2010-0644 affects all versions of Google Chrome prior to 4.0.249.89.
What is the impact of CVE-2010-0644 on user privacy?
CVE-2010-0644 can allow remote DNS servers to log user requests, potentially compromising user privacy.
Is there a workaround for CVE-2010-0644 if I cannot update?
A workaround for CVE-2010-0644 is to configure the browser to avoid using any SOCKS 5 proxy servers.