NVD

Id
57350  
Name
CVE-2007-5274  
Description
Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when Firefox or Opera is used, allows remote attackers to violate the security model for JavaScript outbound connections via a multi-pin DNS rebinding attack dependent on the LiveConnect API, in which JavaScript download relies on DNS resolution by the browser, but JavaScript socket operations rely on separate DNS resolution by a Java Virtual Machine (JVM), a different issue than CVE-2007-5273. NOTE: this is similar to CVE-2007-5232.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-10-08  
Modified Date
2011-07-28  
Seq
2007-5274  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
293041 57350 CVE-2007-5274 http://crypto.stanford.edu/dns/dns-rebinding.pdf  View
293042 57350 CVE-2007-5274 BEA08-198.00  View
293043 57350 CVE-2007-5274 SSRT071483  View
293044 57350 CVE-2007-5274 SUSE-SA:2008:025  View
293045 57350 CVE-2007-5274 oval:org.mitre.oval:def:10908  View
293046 57350 CVE-2007-5274 GLSA-200804-28  View
293047 57350 CVE-2007-5274 1018771  View
293048 57350 CVE-2007-5274 103078  View
293049 57350 CVE-2007-5274 200041  View
293050 57350 CVE-2007-5274 http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html  View
293051 57350 CVE-2007-5274 GLSA-200804-20  View
293052 57350 CVE-2007-5274 GLSA-200806-11  View
293053 57350 CVE-2007-5274 SUSE-SA:2007:055  View
293054 57350 CVE-2007-5274 RHSA-2007:0963  View
293055 57350 CVE-2007-5274 RHSA-2007:1041  View
293056 57350 CVE-2007-5274 RHSA-2008:0132  View
293057 57350 CVE-2007-5274 20071029 FLEA-2007-0061-1 sun-jre sun-jdk  View
293058 57350 CVE-2007-5274 25918  View
293059 57350 CVE-2007-5274 http://www.vmware.com/security/advisories/VMSA-2008-0010.html  View
293060 57350 CVE-2007-5274 ADV-2007-3895  View
293061 57350 CVE-2007-5274 ADV-2008-0609  View
293062 57350 CVE-2007-5274 ADV-2008-1856  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52084 JVNDB-2007-000747 Sun JRE における LiveConnect API の DNS 名前解決方法に関する脆弱性 Firefox もしくは Opera で動作する Sun Java Runtime Environment (JRE) には、LiveConnect API を使用した multi-pin DNS rebinding 攻撃を受け、JavaScript のセキュリティモデルを侵害する脆弱性が存在します。 CVE-2007-5274 28629 CVE-2007-5274 57350 4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000747.html 2007-10-03 2008-03-04 View