CVE-2007-5355

N/A

Published: December 5, 2007 at 11:00 AM UTC

Updated: June 16, 2026 at 10:45 PM UTC

5 products affected across 1 vendorInternet ExplorerWindows XpWindows Vista

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 17%

Description

The Web Proxy Auto-Discovery (WPAD) feature in Microsoft Internet Explorer 6 and 7, when a primary DNS suffix with three or more components is configured, resolves an unqualified wpad hostname in a second-level domain outside this configured DNS domain, which allows remote WPAD servers to conduct man-in-the-middle (MITM) attacks.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Internet Explorer · Microsoft

95%

5.01 sp4 6 6 sp1 7

microsoft-windows-2000 (environment) · microsoft-windows-2003-server (environment) · microsoft-windows-vista (environment) · microsoft-windows-xp (environment)

Windows 2000 · Microsoftdevice

80%

All versions

Windows 2003 Server · Microsoftdevice

80%

All versions

Windows Vista · Microsoftdevice

80%

All versions

Windows Xp · Microsoftdevice

80%

All versions