ID:11337 - Exploit for Integer underflow in Windows and Windows Server - CVE-2024-38063

 
Main Vulnerability Database Exploits ID:11337 - Exploit for Integer underflow in Windows and Windows Server - CVE-2024-38063

ID:11337 - Exploit for Integer underflow in Windows and Windows Server - CVE-2024-38063

Published: April 25, 2025


Vulnerability identifier: #VU95842
Vulnerability risk: High
CVE-ID: CVE-2024-38063
CWE-ID: CWE-191
Exploitation vector: Remote access
Vulnerable software:
Windows
Windows Server

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer underflow in Windows TCP/IP. A remote attacker can send a specially crafted request to the affected application, trigger integer underflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Install updates from vendor's website.