Vulnerabilities > CVE-2022-29505 - Unspecified vulnerability in Linecorp Line

CVSS 4.4 - MEDIUM

Attack vector

LOCAL

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

local

linecorp

NVD

Published: 2022-04-27

Updated: 2022-05-06

Summary

Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege escalation.

Vulnerable Configurations

Part	Description	Count
Application	Linecorp Linecorp Line 4.3.0.724 Linecorp Line 4.7.0 Linecorp Line 4.8.2.1125 Linecorp Line 5.8.0 Linecorp Line 5.21.3.2086 Linecorp Line 5.22.0.2111 Linecorp Line 6.2.1.2289 Linecorp Line 6.2.2.2293 Linecorp Line 6.3.0.2329 Linecorp Line 6.3.2.2338 Linecorp Line 6.4.0.2381 Linecorp Line 6.4.02389 Linecorp Line 6.5.0.2411 Linecorp Line 6.5.2.2431 Linecorp Line 6.5.4.2441 Linecorp Line 6.7.2.2497 Linecorp Line 7.0.0.2545 Linecorp Line 7.2.0	18

References

https://hackerone.com/reports/1423049