Exploit for Heap-based Buffer Overflow in Microsoft

CVE-2024-38077

githubexploit · 2024-08-09

Description

Discussion of a heap overflow exploit for Microsoft CVE-2024-38077 with pseudo-code and attribution.

Entry point

ParameterOpnum 49 · path

Path\\pipe\\TermServLicensing

Heap buffer overflow in CDataCoding::DecodeData() triggered by TLSRpcTelephoneRegisterLKP, enabling arbitrary code execution.

Affected software

Microsoft Windows Server 2008 All versions

Microsoft Windows Server 2012 All versions

Microsoft Windows Server 2016< 10.0.14393.7159

Microsoft Windows Server 2019< 10.0.17763.6054

All known vulnerabilities by product

Windows Windows Server

CVSS 9.8 for CVE-2024-38077

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

95%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

75.4%higher than 99.5% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2024-08-09 02:11

Last Seen:2025-09-05 20:35

Reporter:stupid-h4er

Last commit:2024-08-09

Other exploits for CVE-2024-38077

Exploit for Heap-based Buffer Overflow in Microsoft

2025-12-14 ErmensonxGITHUB

Exploit for Heap-based Buffer Overflow in Microsoft

2024-10-09 mrmtwojGITHUB

Exploit for Heap-based Buffer Overflow in Microsoft

2024-08-09 qi4LGITHUB

Exploit for Heap-based Buffer Overflow in Microsoft

2024-08-09 SecStarBotGITHUB

Exploit Code

README6 lines

## https://sploitus.com/exploit?id=995188CB-67DE-5DE8-81BB-903F53A9FA93
# CVE-2024-38077-POC

Pseudocode, for backup purposes, not original. Please refer to the original author:

The vulnerability author has published the first analysis article: https://sites.google.com/site/zhiniangpeng/blogs/MadLicense

Exploit Code

Share

Share on social media: