Description
Microsoft Internet Explorer 6 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80, a different issue than CVE-2006-4560.
References (2)
Core 2
Core References
Broken Link vdb-entry
x_refsource_osvdb
http://osvdb.org/45525
Technical Description, Third Party Advisory x_refsource_misc
http://crypto.stanford.edu/dns/dns-rebinding.pdf
Scores
EPSS
0.0970
EPSS Percentile
95.0%
Details
Status
published
Products (1)
microsoft/internet_explorer
6.0
Published
Oct 08, 2007
Tracked Since
Feb 18, 2026