Lucene search

[email protected]CVE-2010-0643

HistoryFeb 18, 2010 - 6:00 p.m.

CVE-2010-0643

2010-02-1818:00:00

CWE-200

[email protected]

web.nvd.nist.gov

google chrome

cve-2010-0643

security

http

proxyservers

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.0%

JSON

Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all configured proxy servers are unavailable, which allows remote HTTP servers to obtain potentially sensitive information about the identity of a client user via standard HTTP logging, as demonstrated by a proxy server that was configured for the purpose of anonymity.

Affected configurations

NVD

Node

googlechromeRange≤4.0.249.78

googlechromeMatch0.2.149.27

googlechromeMatch0.2.149.29

googlechromeMatch0.2.149.30

googlechromeMatch0.2.152.1

googlechromeMatch0.2.153.1

googlechromeMatch0.3.154.0

googlechromeMatch0.3.154.3

googlechromeMatch0.4.154.18

googlechromeMatch0.4.154.22

googlechromeMatch0.4.154.31

googlechromeMatch0.4.154.33

googlechromeMatch1.0.154.36

googlechromeMatch1.0.154.39

googlechromeMatch1.0.154.42

googlechromeMatch1.0.154.43

googlechromeMatch1.0.154.46

googlechromeMatch1.0.154.48

googlechromeMatch1.0.154.52

googlechromeMatch1.0.154.53

googlechromeMatch1.0.154.59

googlechromeMatch1.0.154.65

googlechromeMatch2.0.156.1

googlechromeMatch2.0.157.0

googlechromeMatch2.0.157.2

googlechromeMatch2.0.158.0

googlechromeMatch2.0.159.0

googlechromeMatch2.0.169.0

googlechromeMatch2.0.169.1

googlechromeMatch2.0.170.0

googlechromeMatch2.0.172

googlechromeMatch2.0.172.2

googlechromeMatch2.0.172.8

googlechromeMatch2.0.172.27

googlechromeMatch2.0.172.28

googlechromeMatch2.0.172.30

googlechromeMatch2.0.172.31

googlechromeMatch2.0.172.33

googlechromeMatch2.0.172.37

googlechromeMatch2.0.172.38

googlechromeMatch3.0.182.2

googlechromeMatch3.0.190.2

googlechromeMatch3.0.193.2beta

googlechromeMatch3.0.195.21

googlechromeMatch3.0.195.24

googlechromeMatch3.0.195.32

googlechromeMatch3.0.195.33

CPENameOperatorVersion
google:chromegoogle chromele4.0.249.78
google:chromegoogle chromeeq0.2.149.27
google:chromegoogle chromeeq0.2.149.29
google:chromegoogle chromeeq0.2.149.30
google:chromegoogle chromeeq0.2.152.1
google:chromegoogle chromeeq0.2.153.1
google:chromegoogle chromeeq0.3.154.0
google:chromegoogle chromeeq0.3.154.3
google:chromegoogle chromeeq0.4.154.18
google:chromegoogle chromeeq0.4.154.22

CPE	Name	Operator	Version
google:chrome	google chrome	le	4.0.249.78
google:chrome	google chrome	eq	0.2.149.27
google:chrome	google chrome	eq	0.2.149.29
google:chrome	google chrome	eq	0.2.149.30
google:chrome	google chrome	eq	0.2.152.1
google:chrome	google chrome	eq	0.2.153.1
google:chrome	google chrome	eq	0.3.154.0
google:chrome	google chrome	eq	0.3.154.3
google:chrome	google chrome	eq	0.4.154.18
google:chrome	google chrome	eq	0.4.154.22