CVE-2023-34634

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-34634
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-34634.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-34634
Published
2023-08-01T00:00:00Z
Modified
2026-07-08T06:52:01.508335059Z
Summary
[none]
Details

Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34634.json",
    "cna_assigner": "mitre"
}
References

Affected packages

Git / github.com/greenshot/greenshot

Affected ranges

Type
GIT
Repo
https://github.com/greenshot/greenshot
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
a152e2883fca7f78051b3bd6b1e5cc57355cb44c
Database specific 
{
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:getgreenshot:greenshot:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.10.6"
        }
    ]
}

Affected versions

Greenshot-RELEASE-1.*
Greenshot-RELEASE-1.2.8.12
Greenshot-RELEASE-1.2.8.14
v1.*
v1.3.105
v1.3.106
v1.3.108
v1.3.151
v1.3.154
v1.3.157
v1.3.178
v1.3.194
v1.3.201
v1.3.202
v1.3.203
v1.3.204
v1.3.205
v1.3.211
v1.3.213
v1.3.218
v1.3.219
v1.3.220
v1.3.223
v1.3.229
v1.3.231
v1.3.234
v1.3.235
v1.3.238
v1.3.239
v1.3.244
v1.3.246
v1.3.249
v1.3.254
v1.3.256
v1.3.258
v1.3.259
v1.3.260
v1.3.261
v1.3.262
v1.3.265
v1.3.270
v1.3.273
v1.3.274
v1.3.55
v1.3.57
v1.3.63
v1.3.69
v1.3.71
v1.3.75
v1.3.76

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-34634.json"