CVE-2007-5274 : Detail

CVE-2007-5274

1.86%V3
Network
2007-10-08
21h00 +00:00
2018-10-15
18h57 +00:00
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when Firefox or Opera is used, allows remote attackers to violate the security model for JavaScript outbound connections via a multi-pin DNS rebinding attack dependent on the LiveConnect API, in which JavaScript download relies on DNS resolution by the browser, but JavaScript socket operations rely on separate DNS resolution by a Java Virtual Machine (JVM), a different issue than CVE-2007-5273. NOTE: this is similar to CVE-2007-5232.

CVE Informations

Metrics

Metrics Score Severity CVSS Vector Source
V2 2.6 AV:N/AC:H/Au:N/C:N/I:P/A:N [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Products Mentioned

Configuraton 0

Mozilla>>Firefox >> Version *

Opera>>Opera_browser >> Version *

Sun>>Jdk >> Version To (including) 1.6.0

Sun>>Jdk >> Version 1.5.0

Sun>>Jdk >> Version 1.5.0

Sun>>Jdk >> Version 1.5.0

Sun>>Jdk >> Version 1.5.0

Sun>>Jdk >> Version 1.5.0

Sun>>Jdk >> Version 1.5.0

Sun>>Jdk >> Version 1.5.0

Sun>>Jdk >> Version 1.5.0

Sun>>Jdk >> Version 1.5.0

Sun>>Jdk >> Version 1.5.0

Sun>>Jdk >> Version 1.5.0

Sun>>Jdk >> Version 1.6.0

Sun>>Jdk >> Version 1.6.0

Sun>>Jdk >> Version 6

    Sun>>Jdk >> Version 6

      Sun>>Jre >> Version To (including) 1.3.1

      Sun>>Jre >> Version To (including) 1.4.2

      Sun>>Jre >> Version To (including) 1.6.0

      Sun>>Jre >> Version 1.3.0

      Sun>>Jre >> Version 1.3.0

      Sun>>Jre >> Version 1.3.1

      Sun>>Jre >> Version 1.3.1

      Sun>>Jre >> Version 1.3.1

      Sun>>Jre >> Version 1.3.1

      Sun>>Jre >> Version 1.3.1

      Sun>>Jre >> Version 1.4

      Sun>>Jre >> Version 1.4.1

      Sun>>Jre >> Version 1.4.2

      Sun>>Jre >> Version 1.4.2_1

      Sun>>Jre >> Version 1.4.2_3

      Sun>>Jre >> Version 1.4.2_8

      Sun>>Jre >> Version 1.4.2_9

      Sun>>Jre >> Version 1.4.2_10

      Sun>>Jre >> Version 1.4.2_11

      Sun>>Jre >> Version 1.4.2_12

      Sun>>Jre >> Version 1.4.2_13

      Sun>>Jre >> Version 1.4.2_14

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.5.0

      Sun>>Jre >> Version 1.6.0

      Sun>>Sdk >> Version To (including) 1.3.1_20

      Sun>>Sdk >> Version 1.3.1_01

      Sun>>Sdk >> Version 1.3.1_01a

      Sun>>Sdk >> Version 1.3.1_16

      Sun>>Sdk >> Version 1.3.1_18

      Sun>>Sdk >> Version 1.3.1_19

      Sun>>Sdk >> Version 1.4.2

      Sun>>Sdk >> Version 1.4.2_03

      Sun>>Sdk >> Version 1.4.2_08

      Sun>>Sdk >> Version 1.4.2_09

      Sun>>Sdk >> Version 1.4.2_10

      Sun>>Sdk >> Version 1.4.2_11

      Sun>>Sdk >> Version 1.4.2_12

      Sun>>Sdk >> Version 1.4.2_13

      Sun>>Sdk >> Version 1.4.2_14

      Sun>>Sdk >> Version 1.4.2_15

      References

      http://www.redhat.com/support/errata/RHSA-2008-0132.html
      Tags : vendor-advisory, x_refsource_REDHAT
      http://www.redhat.com/support/errata/RHSA-2007-1041.html
      Tags : vendor-advisory, x_refsource_REDHAT
      http://www.vupen.com/english/advisories/2007/3895
      Tags : vdb-entry, x_refsource_VUPEN
      http://secunia.com/advisories/30676
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://secunia.com/advisories/29042
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://secunia.com/advisories/27693
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://securitytracker.com/id?1018771
      Tags : vdb-entry, x_refsource_SECTRACK
      http://secunia.com/advisories/29897
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://secunia.com/advisories/27206
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://secunia.com/advisories/27804
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://security.gentoo.org/glsa/glsa-200804-28.xml
      Tags : vendor-advisory, x_refsource_GENTOO
      http://secunia.com/advisories/29858
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://www.redhat.com/support/errata/RHSA-2007-0963.html
      Tags : vendor-advisory, x_refsource_REDHAT
      http://www.securityfocus.com/bid/25918
      Tags : vdb-entry, x_refsource_BID
      http://www.vupen.com/english/advisories/2008/0609
      Tags : vdb-entry, x_refsource_VUPEN
      http://sunsolve.sun.com/search/document.do?assetkey=1-66-200041-1
      Tags : vendor-advisory, x_refsource_SUNALERT
      http://secunia.com/advisories/27261
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://sunsolve.sun.com/search/document.do?assetkey=1-26-103078-1
      Tags : vendor-advisory, x_refsource_SUNALERT
      http://secunia.com/advisories/28777
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://dev2dev.bea.com/pub/advisory/272
      Tags : vendor-advisory, x_refsource_BEA
      http://secunia.com/advisories/30780
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://secunia.com/advisories/28880
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://secunia.com/advisories/27716
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml
      Tags : vendor-advisory, x_refsource_GENTOO
      http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml
      Tags : vendor-advisory, x_refsource_GENTOO