CVE-2007-5375

Sun Java Virtual Machine - DNS Rebinding Attack via Local Relative URI Handling

Title source: llm

Description

Interpretation conflict in the Sun Java Virtual Machine (JVM) allows user-assisted remote attackers to conduct a multi-pin DNS rebinding attack and execute arbitrary JavaScript in an intranet context, when an intranet web server has an HTML document that references a "mayscript=true" Java applet through a local relative URI, which may be associated with different IP addresses by the browser and the JVM.

References (2)

Core 2

Core References

Various Sources x_refsource_misc

http://crypto.stanford.edu/dns/dns-rebinding.pdf

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/40930

Scores

EPSS 0.0042

EPSS Percentile 61.9%

Details

CWE

CWE-16 CWE-20

Status published

Products (1)

sun/java_virtual_machine

Published Oct 11, 2007

Tracked Since Feb 18, 2026