Denial of Service Vulnerability in LINE for Windows
CVE-2022-22820

5.5MEDIUM

Key Information:

Vendor

Line Corporation

Status
Line For Windows
Vendor
CVE Published:
20 January 2022

What is CVE-2022-22820?

A vulnerability exists in LINE for Windows due to insufficient validation of media files before rendering. Attackers can exploit this by sending specially crafted GIF images, leading to high CPU usage for the message recipient. Users of LINE for Windows prior to version 7.4 are particularly susceptible to this type of attack, which can severely disrupt normal messaging operations and degrade user experience.

Affected Version(s)

LINE for Windows <

References

https://hackerone.com/reports/1357400
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2022-22820 : Denial of Service Vulnerability in LINE for Windows