Vulnerability in Opera Browser
CVE-2007-5276
Opera 9 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80.
EPSS: 0.014 (69.5th percentile) — read the EPSS interpretation.
Affected products
- Opera Opera_browser — versions 9.0
- N/a — versions n/a
References
- cve@mitre.org (Technical Description, Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)