CVE-2007-5355

The CVE describes a design/logic issue in Microsoft WPAD for Internet Explorer 6/7 where, if a primary DNS suffix has three or more components, unqualified wpad queries can resolve to a host in a deeper second-level domain outside the configured DNS zone, enabling potential MITM by remote WPAD se...