Arbitrary Code Execution Vulnerability in LINE for Windows by LINE Corporation
CVE-2021-36216

7.8HIGH

Key Information:

Vendor

Line Corporation

Status
Line For Windows
Vendor
CVE Published:
8 September 2021

What is CVE-2021-36216?

An arbitrary code execution vulnerability exists in LINE for Windows up to version 6.2.1.2289, allowing attackers to inject malicious DLL files. This can enable execution of dangerous or unauthorized code within the application, potentially compromising user systems and data integrity.

Affected Version(s)

LINE for Windows <=

References

https://hackerone.com/reports/950688
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.