CVE-2023-34634
Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web packetstormsecurity.com
- web packetstormsecurity.com
- web greenshot.atlassian.net
- web exploit-db.com