CVE-2023-34634
Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened.
Original description
The description as published by the source.
Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened.
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web packetstormsecurity.com
- web packetstormsecurity.com
- web greenshot.atlassian.net
- web exploit-db.com