Vulnerabilities > CVE-2022-29505 - Unspecified vulnerability in Linecorp Line

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

linecorp

NVD

Published: 2022-04-27

Updated: 2024-11-21

Summary

Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege escalation.

Vulnerable Configurations

Part	Description	Count
Application	Linecorp Linecorp Line 4.3.0.724 Linecorp Line 4.7.0 Linecorp Line 4.8.2.1125 Linecorp Line 5.8.0 Linecorp Line 5.21.3.2086 Linecorp Line 5.22.0.2111 Linecorp Line 6.2.1.2289 Linecorp Line 6.2.2.2293 Linecorp Line 6.3.0.2329 Linecorp Line 6.3.2.2338 Linecorp Line 6.4.0.2381 Linecorp Line 6.4.02389 Linecorp Line 6.5.0.2411 Linecorp Line 6.5.2.2431 Linecorp Line 6.5.4.2441 Linecorp Line 6.7.2.2497 Linecorp Line 7.0.0.2545 Linecorp Line 7.2.0	18

References

https://hackerone.com/reports/1423049
https://hackerone.com/reports/1423049