Vulnerability · Published Dec 4, 2025 · Assigned by VulnCheck
CVE-2024-58278IndigoSTAR Software - perl2exe <= V30.10C - Arbitrary Code Execution
High 8.5
In plain English
A high-severity OS command injection in perl2exe from IndigoSTAR Software. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).
Severity (CVSS 4.0)8.5High
Exploit odds (30 days)0.2%top 89.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
perl2exe <= V30.10C contains an arbitrary code execution vulnerability that allows local authenticated attackers to execute malicious scripts. Attackers can control the 0th argument of packed executables to execute another executable, allowing them to bypass restrictions and gain unauthorized access.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IndigoSTAR Software | perl2exe | 0 – through V30.10C |
Weakness: CWE-78 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References
- ExploitDB-51825 exploit
- IndigoSTAR Software Homepage product
- IndigoSTAR Software Download Page product, permissions-required
- https://www.vulncheck.com/advisories/indigostar-software-perl2exe-v3010c-arbitrary-code-execution third-party-advisory