PT-2025-49134 · Perl2Exe · Perl2Exe

Decrazyo · Publicado 2025-12-04 · Atualizado 2025-12-04 · CVE-2024-58278

Positive Technologies (AI Summary)

CVSS v4.0

8.5

Alta

Vetor base

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions perl2exe versions prior to 30.10C

Description perl2exe versions prior to 30.10C contain an arbitrary code execution issue. Local authenticated attackers can exploit this to execute malicious scripts. Specifically, attackers can control the 0th argument of packed executables, enabling them to execute another executable and bypass restrictions, ultimately gaining unauthorized access.

Recommendations Update perl2exe to a version greater than 30.10C.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2024-58278

Produtos afetados

Perl2Exe

Referências · 6

• 🔥 https://exploit-db.com/exploits/51825 · Exploit
• https://indigostar.com · Nota
• https://indigostar.com/download/p2x-30.10-Linux-x64-5.30.1.tar.gz · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2024-58278 · Nota de Segurança
• https://twitter.com/CVEnew/status/1996685096183582887 · Publicação no Twitter
• https://vulncheck.com/advisories/indigostar-software-perl2exe-v3010c-arbitrary-code-execution · Nota