Exploit for Integer Overflow or Wraparound in Microsoft

CVE-2024-49112 CVE-2024-49113

githubexploit · 2025-01-01

Description

Exploit for CVE-2024-49113 in Windows LDAP allowing remote code execution and crashing servers.

Affected software

Microsoft Windows 10 1507< 10.0.10240.20857

Microsoft Windows 10 1607< 10.0.14393.7606

Microsoft Windows 10 1809< 10.0.17763.6659

Microsoft Windows 10 21h2< 10.0.19044.5247

All known vulnerabilities by product

Windows Windows Lightweight Directory Access Protocol

CVSS Score

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 7 file(s) in the source

EPSS Score

83.0%higher than 99.6% of all CVEs

Updated 2026-07-19

Exploit Details

Modified:2025-08-12 06:26

Last Seen:2025-08-31 22:51

Reporter:SafeBreach-Labs

Written in:Python

Last commit:2025-01-02

Tags

CVE-2024-49113microsoftldap vulnerabilityremote code executionexploit setupsafebreach labs

Other exploits for the same CVE

Exploit for Out-of-bounds Read in Microsoft

2026-07-24 razureinkGITHUB

Exploit for Out-of-bounds Read in Microsoft

2026-04-30 alphatin123GITHUB

Exploit for Out-of-bounds Read in Microsoft

2025-02-15 0xMetr0GITHUB

Exploit for Integer Overflow or Wraparound in Microsoft

2025-01-08 bo0l3anGITHUB

Exploit for Out-of-bounds Read in Microsoft

2025-01-06 SachinartGITHUB

Exploit for Out-of-bounds Read in Microsoft

2025-01-03 barcrangeGITHUB

Exploit for Integer Overflow or Wraparound in Microsoft

2025-01-02 CCIEVoice2009GITHUB

Exploit for Out-of-bounds Read in Microsoft

2025-01-01 SafeBreach-LabsGITHUB

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=320CB01B-FA7D-5AE4-807F-4032C83A587D
PoC exploit for CVE-2024-49113, a Windows Server vulnerability. The tool, LdapNightmare, is written in Python and utilizes the ldaptor and impacket libraries. It is designed to test a vulnerable Windows Server against this specific CVE. The exploit is not specified to be invoked via a particular method, but it is likely run from the command line. The tool is intended for testing purposes only, and its execution may result in remote code execution on the targeted system.