Skip to content
CVE Tracker
Back

CVE-2007-5273

Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and…

Low2.6EPSS 2.7%
Published
Updated
Reserved
Assigned by
mitre

Description

Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound connections via a multi-pin DNS rebinding attack in which the applet download relies on DNS resolution on the proxy server, but the applet's socket operations rely on DNS resolution on the local machine, a different issue than CVE-2007-5274. NOTE: this is similar to CVE-2007-5232.

Scores

CVSS scores of CVE-2007-5273, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified2.0Low2.6AV:N/AC:H/Au:N/C:N/I:P/A:N
EPSS (exploitation in 30 days)
2.7% · top 14% of all CVEs (3 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 2.6.

Weakness

  • n/a

Affected products

  • n/a

    • affected n/a

References (37)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2007-5273 badge
[![CVE-2007-5273](https://trackcve.app/badge/CVE-2007-5273.svg)](https://trackcve.app/cve/CVE-2007-5273)

Record last updated .