CVE-2023-34634

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Aug 1, 2023

Updated: Aug 17, 2023

Summary

CVE-2023-34634 is a vulnerability affecting Greenshot version 1.2.10 and earlier. The issue arises due to insecure .NET content deserialization when opening a .greenshot file, enabling an attacker to execute arbitrary code. This vulnerability poses a significant risk, allowing unauthorized access, data theft, or system manipulation. Users are strongly advised to update to the latest version of Greenshot to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Greenshot

Affected Vendors

Greenshot

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/rzablj
https://www.cve.org/CVERecord?id=CVE-2023-34634
https://nvd.nist.gov/vuln/detail/CVE-2023-34634

Back to Vulnerability Database