Patchwire CVEs, their patch status, and feeds to follow them

CVE-2007-5274

Fixed in a distro release EPSS 3%

Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when Firefox or Opera is used, allows remote attackers to violate the security model for JavaScript outbound connections via a multi-pin DNS rebinding attack dependent on the LiveConnect API, in which JavaScript download relies on DNS resolution by the browser, but JavaScript socket operations rely on separate DNS resolution by a Java Virtual Machine (JVM), a different issue than CVE-2007-5273. NOTE: this is similar to CVE-2007-5232.

Published 2007-10-08 · CVE record · OSV

Products: sun jdk, sun jre, sun sdk

Distro releases

ReleasePackageFixed in
Red Hat rhel extras 3java-1.4.2-ibm0:1.4.2.10-1jpp.2.el3
Red Hat rhel extras 3java-1.4.2-ibm-demo0:1.4.2.10-1jpp.2.el3
Red Hat rhel extras 3java-1.4.2-ibm-devel0:1.4.2.10-1jpp.2.el3
Red Hat rhel extras 3java-1.4.2-ibm-jdbc0:1.4.2.10-1jpp.2.el3
Red Hat rhel extras 3java-1.4.2-ibm-plugin0:1.4.2.10-1jpp.2.el3
Red Hat rhel extras 3java-1.4.2-ibm-src0:1.4.2.10-1jpp.2.el3
Red Hat rhel extras 4java-1.4.2-ibm0:1.4.2.10-1jpp.2.el4
Red Hat rhel extras 4java-1.4.2-ibm-demo0:1.4.2.10-1jpp.2.el4
Red Hat rhel extras 4java-1.4.2-ibm-devel0:1.4.2.10-1jpp.2.el4
Red Hat rhel extras 4java-1.4.2-ibm-javacomm0:1.4.2.10-1jpp.2.el4
Red Hat rhel extras 4java-1.4.2-ibm-jdbc0:1.4.2.10-1jpp.2.el4
Red Hat rhel extras 4java-1.4.2-ibm-plugin0:1.4.2.10-1jpp.2.el4
Red Hat rhel extras 4java-1.4.2-ibm-src0:1.4.2.10-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm1:1.5.0.6-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-demo1:1.5.0.6-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-devel1:1.5.0.6-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-javacomm1:1.5.0.6-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-jdbc1:1.5.0.6-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-plugin1:1.5.0.6-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-src1:1.5.0.6-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-sun0:1.5.0.13-1jpp.1.el4
Red Hat rhel extras 4java-1.5.0-sun-demo0:1.5.0.13-1jpp.1.el4
Red Hat rhel extras 4java-1.5.0-sun-devel0:1.5.0.13-1jpp.1.el4
Red Hat rhel extras 4java-1.5.0-sun-jdbc0:1.5.0.13-1jpp.1.el4
Red Hat rhel extras 4java-1.5.0-sun-plugin0:1.5.0.13-1jpp.1.el4
Red Hat rhel extras 4java-1.5.0-sun-src0:1.5.0.13-1jpp.1.el4
Red Hat rhel extras 5java-1.4.2-ibm0:1.4.2.10-1jpp.2.el5
Red Hat rhel extras 5java-1.4.2-ibm-demo0:1.4.2.10-1jpp.2.el5
Red Hat rhel extras 5java-1.4.2-ibm-devel0:1.4.2.10-1jpp.2.el5
Red Hat rhel extras 5java-1.4.2-ibm-javacomm0:1.4.2.10-1jpp.2.el5
Red Hat rhel extras 5java-1.4.2-ibm-jdbc0:1.4.2.10-1jpp.2.el5
Red Hat rhel extras 5java-1.4.2-ibm-plugin0:1.4.2.10-1jpp.2.el5
Red Hat rhel extras 5java-1.4.2-ibm-src0:1.4.2.10-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-ibm1:1.5.0.6-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-ibm-accessibility1:1.5.0.6-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-ibm-demo1:1.5.0.6-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-ibm-devel1:1.5.0.6-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-ibm-javacomm1:1.5.0.6-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-ibm-jdbc1:1.5.0.6-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-ibm-plugin1:1.5.0.6-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-ibm-src1:1.5.0.6-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-sun0:1.5.0.13-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-sun-demo0:1.5.0.13-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-sun-devel0:1.5.0.13-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-sun-jdbc0:1.5.0.13-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-sun-plugin0:1.5.0.13-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-sun-src0:1.5.0.13-1jpp.1.el5