CVE-2023-34634
HIGHGreenshot < 1.2.10.6 - Remote Code Execution via Insecure .NET Deserialization
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2023-34634.
PoCs published by p4r4bellum, radman404, p4r4bellum, bwatters-r7, including Metasploit module exploits/windows/fileformat/greenshot_deserialize_cve_2023_34634.
AI-analyzed exploit summary This PowerShell script exploits an insecure deserialization vulnerability in GreenShot 1.2.10 and below by crafting a malicious *.greenshot file. It embeds a serialized payload (generated via ysoserial.net) into a PNG file, which triggers arbitrary code execution when opened.
Description
Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened.
Exploits (3)
This PowerShell script exploits an insecure deserialization vulnerability in GreenShot 1.2.10 and below by crafting a malicious *.greenshot file. It embeds a serialized payload (generated via ysoserial.net) into a PNG file, which triggers arbitrary code execution when opened.
This PoC exploits CVE-2023-34634 by crafting a malicious Greenshot image file with an embedded ysoserial payload. The payload is appended to a PNG file, which, when processed by vulnerable software, triggers deserialization leading to arbitrary command execution (e.g., calc.exe).
This Metasploit module exploits a .NET deserialization vulnerability in Greenshot (CVE-2023-34634) by embedding a malicious payload in a Greenshot file. When opened, it executes arbitrary commands with the privileges of the user running Greenshot.
References (5)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H