Exploit for Heap-based Buffer Overflow in Microsoft

CVE-2024-38077

githubexploit · 2024-08-09

Description

Exploit for a heap-based overflow in Microsoft products tied to CVE-2024-38077.

Entry point

ParameterOpnum 49 · path

Path\\pipe\\TermServLicensing

Heap buffer overflow in CDataCoding::DecodeData() triggered by TLSRpcTelephoneRegisterLKP, enabling arbitrary code execution.

Affected software

Microsoft Windows Server 2008 All versions

Microsoft Windows Server 2012 All versions

Microsoft Windows Server 2016< 10.0.14393.7159

Microsoft Windows Server 2019< 10.0.17763.6054

All known vulnerabilities by product

Windows Windows Server

CVSS 9.8 for CVE-2024-38077

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

95%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

75.4%higher than 99.5% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2025-07-03 09:37

Last Seen:2025-09-06 13:04

Reporter:SecStarBot

Last commit:2024-08-09

Other exploits for CVE-2024-38077

Exploit for Heap-based Buffer Overflow in Microsoft

2025-12-14 ErmensonxGITHUB

Exploit for Heap-based Buffer Overflow in Microsoft

2024-10-09 mrmtwojGITHUB

Exploit for Heap-based Buffer Overflow in Microsoft

2024-08-09 stupid-h4erGITHUB

Exploit for Heap-based Buffer Overflow in Microsoft

2024-08-09 qi4LGITHUB

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=2BE7D98F-2995-5204-84A5-0F4ACCD4FF9F
# CVE-2024-38077-POC

Exploit Code

Share

Share on social media: