Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2024-44083 PoC — Hex Rays IDA Pro 安全漏洞

Source
Associated Vulnerability
Title:Hex Rays IDA Pro 安全漏洞 (CVE-2024-44083)
Description:ida64.dll in Hex-Rays IDA Pro through 8.4 crashes when there is a section that has many jumps linked, and the final jump corresponds to the payload from where the actual entry point will be invoked. NOTE: in many use cases, this is an inconvenience but not a security issue.
Description
Makes IDA (all versions) to crash upon opening it. 
Readme
# CVE-2024-44083
Crashes IDA (all versions) upon opening the malicious binary. 

# Disclamer
This software is provided "as is" for educational and research purposes only. The author is not responsible for any damage, loss, or legal issues arising from the use or misuse of this software. By using this software, you agree to use it at your own risk and assume full responsibility for any consequences.

# How to use
- Install rust at https://www.rust-lang.org/.
- Compile the binary with ```cargo build```/```cargo build --release```.
- Run it by giving it the following arguments:
```--input {input_file}``` this is the path of the inputed file.
```--output {output_file}``` - this is the path of the saved output. 
```--jumps {number_of_jumps}``` - this is the number of jumps that.  

# Compatibility
This was tested for x86_64 PE binaries. meaning if you try it on another format, it might not work.
I do think that if some changes are made, it's possible to make this compatible with other architectures and executable formats.
File Snapshot

[4.0K] /data/pocs/9aa44435b5b0ff023b7149bafa5579f3a61c096d ├── [ 342] Cargo.toml ├── [1.0K] README.md ├── [4.0K] resources │   └── [ 704] example.exe ├── [ 617] rustfmt.toml └── [4.0K] src └── [3.2K] main.rs 2 directories, 5 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →