PT-2025-49134 · Perl2Exe · Perl2Exe

Decrazyo · Published 2025-12-04 · Updated 2025-12-04 · CVE-2024-58278

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions perl2exe versions prior to 30.10C

Description perl2exe versions prior to 30.10C contain an arbitrary code execution issue. Local authenticated attackers can exploit this to execute malicious scripts. Specifically, attackers can control the 0th argument of packed executables, enabling them to execute another executable and bypass restrictions, ultimately gaining unauthorized access.

Recommendations Update perl2exe to a version greater than 30.10C.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2024-58278

Affected Products

Perl2Exe

References · 6

• 🔥 https://exploit-db.com/exploits/51825 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-58278 · Security Note
• https://indigostar.com · Note
• https://indigostar.com/download/p2x-30.10-Linux-x64-5.30.1.tar.gz · Note
• https://twitter.com/CVEnew/status/1996685096183582887 · Twitter Post
• https://vulncheck.com/advisories/indigostar-software-perl2exe-v3010c-arbitrary-code-execution · Note