CVE-2007-5355

The Web Proxy Auto-Discovery (WPAD) feature in Microsoft Internet Explorer 6 and 7, when a primary DNS suffix with three or more components is configured…

published December 5, 2007

CVSS

—

EPSS

17%

Percentile

97.1

In the wild

Unconfirmed

What it is

The Web Proxy Auto-Discovery (WPAD) feature in Microsoft Internet Explorer 6 and 7, when a primary DNS suffix with three or more components is configured, resolves an unqualified wpad hostname in a second-level domain outside this configured DNS domain, which allows remote WPAD servers to conduct man-in-the-middle (MITM) attacks.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.17116 · 97.1th percentile
Published: 2007-12-05T11:00Z

EPSS history

Timeline

05 DEC 11:00Z
The Web Proxy Auto-Discovery (WPAD) feature in Microsoft Internet Explorer 6 and 7, when a primary DNS suffix with three or more components is configured…
cvelistv5