CVE-2024-58278

HIGH

IndigoSTAR Software - perl2exe <= V30.10C - Arbitrary Code Execution

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2024-58278 has a selected CVSS score of 8.5 (high); EIP currently links 1 catalogued exploit.

Description

perl2exe <= V30.10C contains an arbitrary code execution vulnerability that allows local authenticated attackers to execute malicious scripts. Attackers can control the 0th argument of packed executables to execute another executable, allowing them to bypass restrictions and gain unauthorized access.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 5, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

perl2exe

Browse IndigoSTAR Software / perl2exe

Default status: unaffected

CVE ListThrough V30.10Caffected

Proofs of concept

1

Catalogued exploits

ExploitDBExecutables Created with perl2exe < V30.10C - Arbitrary Code ExecutionExploitDB exploitby decrazyoNot analyzed1 file
ExploitDB
PoC details

References

5