CVE-2007-5232

Quick assessment

Copy summary Copy citation

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

当applet caching被激活时，JDK和JRE 6 Update 2版本及其早期版本, JDK和JRE 5.0 Update 12版本及其早期版本, SDK和JRE 1.4.2_15版本及其早期版本, 以及SDK和JRE 1.3.1_20版本及其早期版本中的Sun Java Runtime Environment (JRE)允许远程攻击者借助DNS rebinding攻击违反输出连接的安全模式。

CVE-2007-5232 affects n/a n/a. No confirmed in-the-wild exploitation; assess based on exposure. 当applet caching被激活时，JDK和JRE 6 Update 2版本及其早期版本, JDK和JRE 5.0 Update 12版本及其早期版本, SDK和JRE 1.4.2_15版本及其早期版本, 以及SDK和JRE 1.3.1_20版本及其早期版本中的Sun Java Runtime Environment (JRE)允许远程攻击者借助DNS CVE-2007-5232 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2007-5232

I. Basic Information for CVE-2007-5232

Affected Products

II. Public POCs for CVE-2007-5232

III. Intelligence Information for CVE-2007-5232

Vendor Advisories for CVE-2007-5232 (28)

• http://www.vmware.com/security/advisories/VMSA-2008-0010.html x_refsource_CONFIRM
• http://secunia.com/advisories/29042 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/29858 third-party-advisory x_refsource_SECUNIA
• http://www.securityfocus.com/bid/25918 vdb-entry x_refsource_BID
• http://secunia.com/advisories/30780 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30676 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/29340 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/28115 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/29214 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/28880 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/27804 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/27261 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/29897 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/28777 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/27716 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/27206 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/27693 third-party-advisory x_refsource_SECUNIA
• http://www.securitytracker.com/id?1018768 vdb-entry x_refsource_SECTRACK
• http://www.kb.cert.org/vuls/id/336105 third-party-advisory x_refsource_CERT-VN
• http://www.vupen.com/english/advisories/2007/4224 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2007/3895 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2008/1856/references vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2008/0609 vdb-entry x_refsource_VUPEN
• 🔗 Sun JDK/JRE: Multiple vulnerabilities (GLSA 200804-20) — Gentoo security Read full article vendor-advisory x_refsource_GENTOO
• http://security.gentoo.org/glsa/glsa-200804-28.xml vendor-advisory x_refsource_GENTOO
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9331 vdb-entry signature x_refsource_OVAL
• http://www.securityfocus.com/archive/1/482926/100/0/threaded mailing-list x_refsource_BUGTRAQ
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36941 vdb-entry x_refsource_XF

Mailing List Discussions for CVE-2007-5232 (2)

• http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html vendor-advisory x_refsource_SUSE
• http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html vendor-advisory x_refsource_APPLE

Other References for CVE-2007-5232 (15)

• http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html x_refsource_CONFIRM
• http://docs.info.apple.com/article.html?artnum=307177 x_refsource_MISC
• http://conference.hitb.org/hitbsecconf2007kl/materials/D2T1%20-%20Billy%20Rios%20-%20Slipping%20Past%20the%20Firewall.pdf x_refsource_MISC
• http://conference.hitb.org/hitbsecconf2007kl/?page_id=148 x_refsource_MISC
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-103079-1 vendor-advisory x_refsource_SUNALERT
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-201519-1 vendor-advisory x_refsource_SUNALERT
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 vendor-advisory x_refsource_HP
• http://dev2dev.bea.com/pub/advisory/272 vendor-advisory x_refsource_BEA
• http://www.redhat.com/support/errata/RHSA-2008-0156.html vendor-advisory x_refsource_REDHAT
• http://www.redhat.com/support/errata/RHSA-2008-0132.html vendor-advisory x_refsource_REDHAT
• http://www.redhat.com/support/errata/RHSA-2007-1041.html vendor-advisory x_refsource_REDHAT
• http://www.redhat.com/support/errata/RHSA-2007-0963.html vendor-advisory x_refsource_REDHAT
• http://www.redhat.com/support/errata/RHSA-2008-0100.html vendor-advisory x_refsource_REDHAT
• http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml vendor-advisory x_refsource_GENTOO
• http://www.novell.com/linux/security/advisories/2007_55_java.html vendor-advisory x_refsource_SUSE

• https://www.cve.org/CVERecord?id=CVE-2007-5232

Same Patch Batch · n/a · 2007-10-05 · 24 CVEs total

Showing top 20 of 24 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2007-5232