CVE-2007-5375

no score yetEPSS 1.4%

Interpretation conflict in the Sun Java Virtual Machine (JVM) allows user-assisted remote attackers to conduct a multi-pin DNS rebinding attack and execute arbitrary JavaScript in an intranet context, when an intranet web server has an HTML document that references a "mayscript=true" Java applet through a local relative URI, which may be associated with different IP addresses by the browser and the JVM.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWEs: CWE-16, CWE-20
Published: 2007-10-11
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

sun:java_virtual_machine

References

http://crypto.stanford.edu/dns/dns-rebinding.pdf
http://osvdb.org/40930
http://crypto.stanford.edu/dns/dns-rebinding.pdf
http://osvdb.org/40930

Check your stack JSON