Arbitrary code execution via attacker-controlled argument zero

OS command injection in IndigoStar Software Perl2Exe 30.10C and earlier allows local users to execute arbitrary packed scripts. A packed executable trusts its process's zeroth argument as the file to unpack and run, rather than binding execution to its own file. A local user who can launch the ostensibly safe executable with a forged argument zero can redirect it to another Perl2Exe-packed binary, bypass restricted-shell controls, and run that binary's embedded script.