Exploit for Out-of-bounds Read in Microsoft

githubexploit · 2025-01-01

Description

Exploit for CVE-2024-49113 in Microsoft LDAP enables remote code execution and crashes servers.

Affected software

Microsoft Windows 10 1507< 10.0.10240.20857

Microsoft Windows 10 1607< 10.0.14393.7606

Microsoft Windows 10 1809< 10.0.17763.6659

Microsoft Windows 10 21h2< 10.0.19044.5247

All known vulnerabilities by product

Windows Windows Lightweight Directory Access Protocol

CVSS 7.5 for CVE-2024-49113

7.5

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:NONE

Integrity:NONE

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 7 file(s) in the source

EPSS Score

83.0%higher than 99.6% of all CVEs

Updated 2026-07-19

Exploit Details

Modified:2025-08-12 06:26

Last Seen:2025-08-31 22:54

Reporter:SafeBreach-Labs

Written in:Python

Last commit:2025-01-02

Tags

CVE-2024-49113microsoft ldapremote code executionexploit demonstrationsafebreach labs

Other exploits for CVE-2024-49113

Exploit for Out-of-bounds Read in Microsoft

2026-07-24 razureinkGITHUB

Exploit for Out-of-bounds Read in Microsoft

2026-04-30 alphatin123GITHUB

Exploit for Out-of-bounds Read in Microsoft

2025-02-15 0xMetr0GITHUB

Exploit for Out-of-bounds Read in Microsoft

2025-01-06 SachinartGITHUB

Exploit for Out-of-bounds Read in Microsoft

2025-01-03 barcrangeGITHUB

Exploit for Integer Overflow or Wraparound in Microsoft

2025-01-01 SafeBreach-LabsGITHUB

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=0B2BC812-4D8D-510C-88A7-B6FB2897A396
PoC exploit for CVE-2024-49113, a Windows Server vulnerability. The tool, LdapNightmare, is written in Python and utilizes the ldaptor and impacket libraries. It is designed to test a vulnerable Windows Server against this specific vulnerability. The exploit is likely to be executed via a Python script, although the exact invocation method is not specified. The tool is intended to demonstrate the exploitation of CVE-2024-49113, which is a Windows Server vulnerability.