← All advisories

High severity7.8NVD Advisory· Published Aug 1, 2023· Updated Jun 17, 2026

CVE-2023-34634

CVE-2023-34634

Description

Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Getgreenshot/Greenshot
cpe:2.3:a:getgreenshot:greenshot:*:*:*:*:*:*:*:*
Range: <=1.2.10.6
Greenshot/Greenshotcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=1.2.10

Patches

Vulnerability mechanics

References

5

github.com/greenshot/greenshot/commit/a152e2883fca7f78051b3bd6b1e5cc57355cb44cnvdPatchThird Party Advisory
packetstormsecurity.com/files/173825/GreenShot-1.2.10-Arbitrary-Code-Execution.htmlnvdExploitPermissions RequiredThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/51633nvdExploitThird Party AdvisoryVDB Entry
greenshot.atlassian.net/browse/BUG-3061nvdIssue TrackingThird Party Advisory
packetstormsecurity.com/files/174222/Greenshot-1.3.274-Deserialization-Command-Execution.htmlnvdPermissions Required

News mentions

0

No linked articles in our index yet.