{"id":"CVE-2023-34634","details":"Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened.","modified":"2026-08-12T03:51:22.054472817Z","published":"2023-08-01T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34634.json"},"references":[{"type":"WEB","url":"http://packetstormsecurity.com/files/173825/GreenShot-1.2.10-Arbitrary-Code-Execution.html"},{"type":"WEB","url":"http://packetstormsecurity.com/files/174222/Greenshot-1.3.274-Deserialization-Command-Execution.html"},{"type":"WEB","url":"https://greenshot.atlassian.net/browse/BUG-3061"},{"type":"WEB","url":"https://www.exploit-db.com/exploits/51633"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34634.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34634"},{"type":"FIX","url":"https://github.com/greenshot/greenshot/commit/a152e2883fca7f78051b3bd6b1e5cc57355cb44c"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/greenshot/greenshot","events":[{"introduced":"0"},{"fixed":"a152e2883fca7f78051b3bd6b1e5cc57355cb44c"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"1.2.10.6"}],"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:getgreenshot:greenshot:*:*:*:*:*:*:*:*"}}],"versions":["v1.3.274","v1.3.273","v1.3.270","v1.3.265","v1.3.262","v1.3.261","v1.3.260","v1.3.259","v1.3.258","v1.3.256","v1.3.254","v1.3.249","v1.3.246","v1.3.244","v1.3.239","v1.3.238","v1.3.235","v1.3.234","v1.3.231","v1.3.229","v1.3.223","v1.3.220","v1.3.219","v1.3.218","v1.3.213","v1.3.211","v1.3.205","v1.3.204","v1.3.203","v1.3.202","v1.3.201","v1.3.194","v1.3.178","v1.3.157","v1.3.154","v1.3.151","v1.3.108","v1.3.106","v1.3.105","v1.3.76","v1.3.75","v1.3.71","v1.3.69","v1.3.63","v1.3.57","v1.3.55","Greenshot-RELEASE-1.2.8.14","Greenshot-RELEASE-1.2.8.12"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-34634.json"}}],"schema_version":"1.9.0"}