30 matches found
Installer for LINE for Windows insecurely loads Dynamic Link Libraries
Overview The installer for LINE for Windows provided by LY Corporation contains the following vulnerability: Uncontrolled search path element CWE-427 - CVE-2026-13133 The CVSS evaluation above assumes that a victim user is directed to download and place a specially crafted DLL file alongside the...
CVE-2026-13133: Uncontrolled Search Path Element
A vulnerability has been identified in LineInst.exe LINE for Windows prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy...
EUVD-2018-1419
Malware in sbrugna...
EUVD-2022-33842
Malicious code in bioql PyPI...
EUVD-2022-27959
Malicious code in bioql PyPI...
CVE-2022-22820
Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption for message recipient by sending specially crafted gif image in LINE for Windows before 7.4...
CVE-2022-29505
Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege escalation...
CVE-2021-36216
LINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection...
Privilege escalation
Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege escalation...
CVE-2022-29505
Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege escalation...
LINE for Windows 安全漏洞
LINE for Windows is a Windows-based instant messaging application from Japanese company LINE. A security vulnerability exists in LINE prior to version 7.8, which stems from a build error in the openssl dependency, making LINE for Windows prior to 7.8 vulnerable to DLL injection that could lead to...
CVE-2022-29505: Undefined Security Weakness
Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege escalation...
CVE-2022-22820
Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption for message recipient by sending specially crafted gif image in LINE for Windows before 7.4...
Design/Logic Flaw
Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption for message recipient by sending specially crafted gif image in LINE for Windows before 7.4...
CVE-2022-22820
Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption for message recipient by sending specially crafted gif image in LINE for Windows before 7.4...
LINE for Windows 输入验证错误漏洞
Line Corporation LINE for Windows is a Windows-based instant messaging application from Line Corporation, Japan. An input validation error vulnerability exists in LINE for Windows, which stems from a lack of media file checking before rendering, and can be exploited to send specially crafted gif...
PT-2022-15696 · Line · Line For Windows
Name of the Vulnerable Software and Affected Versions: LINE for Windows versions prior to 7.4 Description: The issue arises from the lack of media file checks before rendering, allowing an attacker to cause abnormal CPU consumption for the message recipient by sending a specially crafted gif imag...
CVE-2022-22820: Improper Input Validation
Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption for message recipient by sending specially crafted gif image in LINE for Windows before 7.4...
