P4R4Bellum

**Name of the Vulnerable Software and Affected Versions** Greenshot versions 1.2.10 and below **Description** The issue allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened. **Recommendations** For Greenshot versions 1.2.10 and below, as a temporary workaround, consider restricting the opening of .greenshot files from untrusted sources until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.