Description
Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries directly, which allows remote DNS servers to obtain potentially sensitive information about the identity of a client user via request logging, as demonstrated by a proxy server that was configured for the purpose of anonymity.
References
- 38177 vdb-entry
- http://code.google.com/p/chromium/issues/detail?id=29914
- http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs
- 1023583 vdb-entry
- ADV-2010-0361 vdb-entry
- http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html
- oval:org.mitre.oval:def:13926 vdb-entry signature
- 38545 third-party-advisory