CVE-2010-0643

CVSS V2 Medium 4.3 CVSS V3 None
Description
Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all configured proxy servers are unavailable, which allows remote HTTP servers to obtain potentially sensitive information about the identity of a client user via standard HTTP logging, as demonstrated by a proxy server that was configured for the purpose of anonymity.
Overview
  • CVE ID
  • CVE-2010-0643
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2010-02-18T18:00:00
  • Last Modified Date
  • 2017-09-19T01:30:27
Weakness Enumerations
CWE URL
CWE-200 http://cwe.mitre.org/data/definitions/200.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* 1 OR 4.0.249.78
cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:3.0.195.21:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:3.0.195.24:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:3.0.195.32:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:google:chrome:3.0.195.33:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:P/I:N/A:N
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • NONE
  • Availability Impact
  • NONE
  • Base Score
  • 4.3
  • Severity
  • MEDIUM
  • Exploitability Score
  • 8.6
  • Impact Score
  • 2.9
References
Reference URL Reference Tags
http://securitytracker.com/id?1023583
http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html Patch
http://code.google.com/p/chromium/issues/detail?id=12303
http://www.osvdb.org/62315
http://secunia.com/advisories/38545 Vendor Advisory
http://www.securityfocus.com/bid/38177
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs Vendor Advisory
http://www.vupen.com/english/advisories/2010/0361 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/56212
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14500
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2010-0643
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0643
History
Created Old Value New Value Data Type Notes
2022-05-10 08:35:00 Added to TrackCVE