Lucene search

JpcertCVE-2016-4850

HistoryApr 20, 2017 - 6:59 p.m.

CVE-2016-4850

2017-04-2018:59:00

CWE-284

jpcert

web.nvd.nist.gov

cve-2016-4850

line

windows

security vulnerability

arbitrary code execution

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.01

Percentile

83.5%

JSON

LINE for Windows before 4.8.3 allows man-in-the-middle attackers to execute arbitrary code.

Affected configurations

Nvd

Node

linecorplineRange≤4.8.2.1125windows

VendorProductVersionCPE
linecorpline*cpe:2.3:a:linecorp:line:*:*:*:*:*:windows:*:*

Vendor	Product	Version	CPE
linecorp	line	*	cpe:2.3:a:linecorp:line::::::windows::*

References

jvn.jp/en/jp/JVN05924524/index.html

jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000153.html

www.securityfocus.com/bid/92644

linecorp.com/ja/security/article/65

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.01

Percentile

83.5%

JSON

Related for CVE-2016-4850