Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when Firefox or Opera is used, allows remote attackers to violate the security model for JavaScript outbound connections via a multi-pin DNS rebinding attack dependent on the LiveConnect API, in which JavaScript download relies on DNS resolution by the browser, but JavaScript socket operations rely on separate DNS resolution by a Java Virtual Machine (JVM), a different issue than CVE-2007-5273. NOTE: this is similar to CVE-2007-5232.
2007-10-08T23:17:00.000
2025-04-09T00:30:58.490
Deferred
CVSSv2: 2.6 (LOW)
AV:N/AC:H/Au:N/C:N/I:P/A:N
4.9
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | mozilla | firefox | * | No |
| Application | opera | opera_browser | * | No |
| Application | sun | jdk | ≤ 1.6.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.5.0 | Yes |
| Application | sun | jdk | 1.6.0 | Yes |
| Application | sun | jdk | 1.6.0 | Yes |
| Application | sun | jdk | 6 | Yes |
| Application | sun | jdk | 6 | Yes |
| Application | sun | jre | ≤ 1.3.1 | Yes |
| Application | sun | jre | ≤ 1.4.2 | Yes |
| Application | sun | jre | ≤ 1.6.0 | Yes |
| Application | sun | jre | 1.3.0 | Yes |
| Application | sun | jre | 1.3.0 | Yes |
| Application | sun | jre | 1.3.1 | Yes |
| Application | sun | jre | 1.3.1 | Yes |
| Application | sun | jre | 1.3.1 | Yes |
| Application | sun | jre | 1.3.1 | Yes |
| Application | sun | jre | 1.3.1 | Yes |
| Application | sun | jre | 1.4 | Yes |
| Application | sun | jre | 1.4.1 | Yes |
| Application | sun | jre | 1.4.2 | Yes |
| Application | sun | jre | 1.4.2_1 | Yes |
| Application | sun | jre | 1.4.2_3 | Yes |
| Application | sun | jre | 1.4.2_8 | Yes |
| Application | sun | jre | 1.4.2_9 | Yes |
| Application | sun | jre | 1.4.2_10 | Yes |
| Application | sun | jre | 1.4.2_11 | Yes |
| Application | sun | jre | 1.4.2_12 | Yes |
| Application | sun | jre | 1.4.2_13 | Yes |
| Application | sun | jre | 1.4.2_14 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.5.0 | Yes |
| Application | sun | jre | 1.6.0 | Yes |
| Application | sun | sdk | ≤ 1.3.1_20 | Yes |
| Application | sun | sdk | 1.3.1_01 | Yes |
| Application | sun | sdk | 1.3.1_01a | Yes |
| Application | sun | sdk | 1.3.1_16 | Yes |
| Application | sun | sdk | 1.3.1_18 | Yes |
| Application | sun | sdk | 1.3.1_19 | Yes |
| Application | sun | sdk | 1.4.2 | Yes |
| Application | sun | sdk | 1.4.2_03 | Yes |
| Application | sun | sdk | 1.4.2_08 | Yes |
| Application | sun | sdk | 1.4.2_09 | Yes |
| Application | sun | sdk | 1.4.2_10 | Yes |
| Application | sun | sdk | 1.4.2_11 | Yes |
| Application | sun | sdk | 1.4.2_12 | Yes |
| Application | sun | sdk | 1.4.2_13 | Yes |
| Application | sun | sdk | 1.4.2_14 | Yes |
| Application | sun | sdk | 1.4.2_15 | Yes |