CVE-2024-58278CWE-78command-injection

CVE-2024-58278

published December 5, 2025

CVSS
8.5
EPSS
0%
Percentile
8.0
In the wild
Unconfirmed
What it is

perl2exe <= V30.10C contains an arbitrary code execution vulnerability that allows local authenticated attackers to execute malicious scripts. Attackers can control the 0th argument of packed executables to execute another executable, allowing them to bypass restrictions and gain unauthorized access.

The record
Technical detail
CVSS
8.5 · NONE
CVSS v4.0
Not supplied
EPSS
0.00188 · 8.0th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2025-12-05T02:16Z
References (4)
https://www.indigostar.com/ · [email protected]https://www.indigostar.com/download/p2x-30.10-Linux-x64-5.30.1.tar.gz · [email protected]https://www.exploit-db.com/exploits/51825 · [email protected]https://www.vulncheck.com/advisories/indigostar-software-perl2exe-v3010c-arbitrary-code-execution · [email protected]
EPSS history
Timeline
  • 04 DEC 20:42Z
    IndigoSTAR Software - perl2exe <= V30.10C - Arbitrary Code Execution
    cvelistv5