Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound connections via a multi-pin DNS rebinding attack in which the applet download relies on DNS resolution on the proxy server, but the applet's socket operations rely on DNS resolution on the local machine, a different issue than CVE-2007-5274. NOTE: this is similar to CVE-2007-5232.
2007-10-08T23:17:00.000
2025-04-09T00:30:58.490
Deferred
CVSSv2: 2.6 (LOW)
AV:N/AC:H/Au:N/C:N/I:P/A:N
4.9
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.6.0 | Yes |
| Application | sun | jdk | 1.6.0 | Yes |
| Application | sun | jre | 1.3.0 | Yes |
| Application | sun | jre | 1.3.0 | Yes |
| Application | sun | jre | 1.3.1 | Yes |
| Application | sun | jre | 1.3.1 | Yes |
| Application | sun | jre | 1.3.1 | Yes |
| Application | sun | jre | 1.3.1 | Yes |
| Application | sun | jre | 1.3.1 | Yes |
| Application | sun | jre | 1.3.1 | Yes |
| Application | sun | jre | 1.4 | Yes |
| Application | sun | jre | 1.4.1 | Yes |
| Application | sun | jre | 1.4.2 | Yes |
| Application | sun | jre | 1.4.2_1 | Yes |
| Application | sun | jre | 1.4.2_3 | Yes |
| Application | sun | jre | 1.4.2_8 | Yes |
| Application | sun | jre | 1.4.2_9 | Yes |
| Application | sun | jre | 1.4.2_10 | Yes |
| Application | sun | jre | 1.4.2_11 | Yes |
| Application | sun | jre | 1.4.2_12 | Yes |
| Application | sun | jre | 1.4.2_13 | Yes |
| Application | sun | jre | 1.4.2_14 | Yes |
| Application | sun | jre | 1.4.2_15 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.6.0 | Yes |
| Application | sun | jre | 1.6.0 | Yes |
| Application | sun | sdk | 1.3.1_01 | Yes |
| Application | sun | sdk | 1.3.1_01a | Yes |
| Application | sun | sdk | 1.3.1_16 | Yes |
| Application | sun | sdk | 1.3.1_18 | Yes |
| Application | sun | sdk | 1.3.1_19 | Yes |
| Application | sun | sdk | 1.3.1_20 | Yes |
| Application | sun | sdk | 1.4.2 | Yes |
| Application | sun | sdk | 1.4.2_03 | Yes |
| Application | sun | sdk | 1.4.2_08 | Yes |
| Application | sun | sdk | 1.4.2_09 | Yes |
| Application | sun | sdk | 1.4.2_10 | Yes |
| Application | sun | sdk | 1.4.2_11 | Yes |
| Application | sun | sdk | 1.4.2_12 | Yes |
| Application | sun | sdk | 1.4.2_13 | Yes |
| Application | sun | sdk | 1.4.2_14 | Yes |
| Application | sun | sdk | 1.4.2_15 | Yes |