RCE in Indigostar Software Perl2exe
CVE-2024-58278
perl2exe <= V30.10C contains an arbitrary code execution vulnerability that allows local authenticated attackers to execute malicious scripts. Attackers can control the 0th argument of packed executables to execute another executable, allowing them to bypass restrictions and gain unauthorized access.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.002 (6.5th percentile) — read the EPSS interpretation.
Affected products
- Indigostar Software Perl2exe — versions 0
Weakness classification (CWE)
References
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (product, permissions-required)
- disclosure@vulncheck.com (third-party-advisory)