PT-2023-1976 · Google+1 · Google Pixel+2
Chris Blume
+5
·
Published
2023-03-23
·
Updated
2026-01-26
·
CVE-2023-28303
CVSS v3.1
3.3
Low
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Windows Snipping Tool versions prior to 10.2008.3001.0
Windows 10 Snip & Sketch versions prior to 11.2302.20.0
Description
The issue is related to the incorrect procedure of saving a file after editing and replacing it with its original file, which may allow an attacker to gain unauthorized access to protected information. The problem is caused by image editors incorrectly deleting cropped image data when overwriting the original file. For example, if a user takes a screenshot and wants to crop out confidential information before publishing it, the expected effect is that the cropped data will be deleted when the image is saved, but it is not. Researchers have discovered that both the Google Pixel marking tool and the Windows Snipping Tool leave cropped data in the original file. This can lead to the disclosure of confidential information that the user wanted to hide. The estimated number of publicly available images affected by this issue may be significant, with over 4000 images on VirusTotal alone.
Recommendations
For Windows Snipping Tool versions prior to 10.2008.3001.0, update to version 10.2008.3001.0 or later.
For Windows 10 Snip & Sketch versions prior to 11.2302.20.0, update to version 11.2302.20.0 or later.
As a general precaution, always be aware of the possibility of recovering cropped data in screenshots made with earlier versions of the software.
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Google Pixel
Windows 10 Snip & Sketch
Windows Snipping Tool