What’s Vulnerable › Vulnerabilities

CVE-2024-58278: IndigoSTAR Software - perl2exe <= V30.10C - Arbitrary Code Execution

• Severity: high (CVSS 8.5 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-04 · updated 2026-09-26
• Weakness: CWE-78

Description

perl2exe <= V30.10C contains an arbitrary code execution vulnerability that allows local authenticated attackers to execute malicious scripts. Attackers can control the 0th argument of packed executables to execute another executable, allowing them to bypass restrictions and gain unauthorized access.

Affected products

• IndigoSTAR Software perl2exe: through V30.10C

References

• https://www.exploit-db.com/exploits/51825
• https://www.indigostar.com/
• https://www.indigostar.com/download/p2x-30.10-Linux-x64-5.30.1.tar.gz
• https://www.vulncheck.com/advisories/indigostar-software-perl2exe-v3010c-arbitrary-code-execution

Get alerted when CVE-2024-58278 or the next vulnerability affects your stack