CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-5273

Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound connections via a multi-pin DNS rebinding attack in which the applet download relies on DNS resolution on the proxy server, but the applet's socket operations rely on DNS resolution on the local machine, a different issue than CVE-2007-5274. NOTE: this is similar to CVE-2007-5232.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.065

EPSS Ranking 90.7%

CVSS Severity

CVSS v2 Score 2.6

References

Products affected by CVE-2007-5273

Sun » Jdk » Version: 1.5.0

cpe:2.3:a:sun:jdk:1.5.0
Sun » Jdk » Version: 1.6.0

cpe:2.3:a:sun:jdk:1.6.0
Sun » Jre » Version: 1.3.0

cpe:2.3:a:sun:jre:1.3.0
Sun » Jre » Version: 1.3.1

cpe:2.3:a:sun:jre:1.3.1
Sun » Jre » Version: 1.4

cpe:2.3:a:sun:jre:1.4
Sun » Jre » Version: 1.4.1

cpe:2.3:a:sun:jre:1.4.1
Sun » Jre » Version: 1.4.2

cpe:2.3:a:sun:jre:1.4.2
Sun » Jre » Version: 1.4.2_1

cpe:2.3:a:sun:jre:1.4.2_1
Sun » Jre » Version: 1.4.2_10

cpe:2.3:a:sun:jre:1.4.2_10
Sun » Jre » Version: 1.4.2_11

cpe:2.3:a:sun:jre:1.4.2_11
Sun » Jre » Version: 1.4.2_12

cpe:2.3:a:sun:jre:1.4.2_12
Sun » Jre » Version: 1.4.2_13

cpe:2.3:a:sun:jre:1.4.2_13
Sun » Jre » Version: 1.4.2_14

cpe:2.3:a:sun:jre:1.4.2_14
Sun » Jre » Version: 1.4.2_15

cpe:2.3:a:sun:jre:1.4.2_15
Sun » Jre » Version: 1.4.2_3

cpe:2.3:a:sun:jre:1.4.2_3
Sun » Jre » Version: 1.4.2_8

cpe:2.3:a:sun:jre:1.4.2_8
Sun » Jre » Version: 1.4.2_9

cpe:2.3:a:sun:jre:1.4.2_9
Sun » Jre » Version: 1.5.0

cpe:2.3:a:sun:jre:1.5.0
Sun » Jre » Version: 1.6.0

cpe:2.3:a:sun:jre:1.6.0
Sun » Sdk » Version: 1.3.1_01

cpe:2.3:a:sun:sdk:1.3.1_01
Sun » Sdk » Version: 1.3.1_01a

cpe:2.3:a:sun:sdk:1.3.1_01a
Sun » Sdk » Version: 1.3.1_16

cpe:2.3:a:sun:sdk:1.3.1_16
Sun » Sdk » Version: 1.3.1_18

cpe:2.3:a:sun:sdk:1.3.1_18
Sun » Sdk » Version: 1.3.1_19

cpe:2.3:a:sun:sdk:1.3.1_19
Sun » Sdk » Version: 1.3.1_20

cpe:2.3:a:sun:sdk:1.3.1_20
Sun » Sdk » Version: 1.4.2

cpe:2.3:a:sun:sdk:1.4.2
Sun » Sdk » Version: 1.4.2_03

cpe:2.3:a:sun:sdk:1.4.2_03
Sun » Sdk » Version: 1.4.2_08

cpe:2.3:a:sun:sdk:1.4.2_08
Sun » Sdk » Version: 1.4.2_09

cpe:2.3:a:sun:sdk:1.4.2_09
Sun » Sdk » Version: 1.4.2_10

cpe:2.3:a:sun:sdk:1.4.2_10
Sun » Sdk » Version: 1.4.2_11

cpe:2.3:a:sun:sdk:1.4.2_11
Sun » Sdk » Version: 1.4.2_12

cpe:2.3:a:sun:sdk:1.4.2_12
Sun » Sdk » Version: 1.4.2_13

cpe:2.3:a:sun:sdk:1.4.2_13
Sun » Sdk » Version: 1.4.2_14

cpe:2.3:a:sun:sdk:1.4.2_14
Sun » Sdk » Version: 1.4.2_15

cpe:2.3:a:sun:sdk:1.4.2_15

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-5273

Products

Pricing

Contact Us