CVE-2007-5277: Medium severity Microsoft Internet Explorer vulnerability

Published Oct 8, 2007

Updated

Microsoft Internet Explorer 6 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80, a different issue than CVE-2006-4560.

Affected Software

1 affected component

Microsoft Internet Explorer=6.0

Event History

Oct 8, 2007

CVE Published

11:17 PM

Oct 9, 2007

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5277?

CVE-2007-5277 is considered a moderate severity vulnerability that allows for DNS rebinding attacks.

How do I fix CVE-2007-5277?

To fix CVE-2007-5277, upgrade Microsoft Internet Explorer to a more recent version that addresses this vulnerability.

What type of attacks can CVE-2007-5277 facilitate?

CVE-2007-5277 can facilitate DNS rebinding attacks, potentially allowing remote attackers to interact with internal networks.

Which version of Internet Explorer is affected by CVE-2007-5277?

CVE-2007-5277 specifically affects Microsoft Internet Explorer version 6.0.

What is the main issue caused by CVE-2007-5277?

The main issue caused by CVE-2007-5277 is that Internet Explorer 6 improperly drops DNS pins based on failed connections, enabling exploitation through rebinding.