Vulnerability in Microsoft Internet Explorer
CVE-2007-5277
Microsoft Internet Explorer 6 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80, a different issue than CVE-2006-4560.
EPSS: 0.097 (95.0th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Internet_explorer — versions 6.0
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
- cve@mitre.org (Technical Description, Third Party Advisory, x_refsource_MISC)