CVE-2023-34634

Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

7.55% chance of exploitation in the next 30 days, 94th percentile

Published

2023-08-01

Updated

2024-10-23

Proof-of-concept exploits (2)

• http://packetstormsecurity.com/files/173825/GreenShot-1.2.10-Arbitrary-Code-Execution.html
• radman404/CVE-2023-346342★ · 2023-08-18

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/greenshot_des…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/51633

References

• CVE Record
• NVD entry

Related

• CVE-2023-34625
• CVE-2023-34635
• CVE-2023-34624
• CVE-2023-34645
• CVE-2023-34623
• CVE-2023-34654