
luotengyuan/MyScreenTools
Releases8
Frequency1 month 5 days
Last Release
Stars86
Windows屏幕工具,保护功能: 1、截图+快捷键截图;2、贴图+快捷键贴图; 3、屏幕颜色提取+快捷键屏幕颜色提取; 4、文字识别+快捷键文字识别; 5、表格识别+快捷键表格识别;6、翻译+划词翻译;7、GIF录屏;8、GIF压缩;
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 8.1 HIGH | — | ||
MyScreenTools v2.2.1.0 contains a critical OS command injection vulnerability in the GIF compression tool. The application fails to properly sanitize user-supplied file paths before passing them to cmd.exe, allowing attackers to execute arbitrary system commands with the privileges of the user running the application. The vulnerability exists in the CMD() function within GIFSicleTool\Form_gif_sicle_tool.cs, which constructs shell commands by concatenating unsanitized user input (file paths) and executes them via cmd.exe. | |||