cve/2007/CVE-2007-5375.md

### [CVE-2007-5375](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5375)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Interpretation conflict in the Sun Java Virtual Machine (JVM) allows user-assisted remote attackers to conduct a multi-pin DNS rebinding attack and execute arbitrary JavaScript in an intranet context, when an intranet web server has an HTML document that references a "mayscript=true" Java applet through a local relative URI, which may be associated with different IP addresses by the browser and the JVM.

### POC

#### Reference
- http://crypto.stanford.edu/dns/dns-rebinding.pdf

#### Github
No PoCs found on GitHub currently.