CVE-2007-5277
Last modified
CVE-2007-5277 is a vulnerability of currently unknown severity. Microsoft Internet Explorer 6 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80, a different issue than CVE-2006-4560.. EPSS estimates a 9.71% chance of exploitation in the next 30 days.
Description
Microsoft Internet Explorer 6 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80, a different issue than CVE-2006-4560.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Internet Explorer | 6.0 |
References
- http://crypto.stanford.edu/dns/dns-rebinding.pdfTechnical Description, Third Party Advisory
- http://osvdb.org/45525Broken Link
- http://crypto.stanford.edu/dns/dns-rebinding.pdfTechnical Description, Third Party Advisory
- http://osvdb.org/45525Broken Link
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-5277?
How severe is CVE-2007-5277?
How do I fix CVE-2007-5277?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-5271Multiple PHP remote file inclusion vulnerabilities in Trioni…
- CVE-2007-5272SQL injection vulnerability in kategori.asp in Furkan Tastan…
- CVE-2007-5273Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2…
- CVE-2007-5274Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2…
- CVE-2007-5275The Adobe Macromedia Flash 9 plug-in allows remote attackers…
- CVE-2007-5276Opera 9 drops DNS pins based on failed connections to irrele…
- CVE-2007-5278Zomplog 3.8.1 and earlier stores potentially sensitive infor…
- CVE-2007-5279Heap-based buffer overflow in ConeXware PowerArchiver before…
- CVE-2007-5280Multiple cross-site scripting (XSS) vulnerabilities in messa…
- CVE-2007-5281The Java Secure Socket Extension (JSSE) in the Hitachi Cosmi…
- CVE-2007-5282Hitachi Cosminexus Agent 03-00 through 03-05, and Cosminexus…
- CVE-2007-5283The TSC Domain Manager in Hitachi TPBroker Object Transactio…
Are you affected by CVE-2007-5277?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST