Vulnerability Details CVE-2022-29505
Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege escalation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.9%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 4.4
Products affected by CVE-2022-29505
-
cpe:2.3:a:linecorp:line:4.3.0.724
-
cpe:2.3:a:linecorp:line:4.7.0
-
cpe:2.3:a:linecorp:line:4.8.2.1125
-
cpe:2.3:a:linecorp:line:5.21.3.2086
-
cpe:2.3:a:linecorp:line:5.22.0.2111
-
cpe:2.3:a:linecorp:line:5.8.0
-
cpe:2.3:a:linecorp:line:6.2.1.2289
-
cpe:2.3:a:linecorp:line:6.2.2.2293
-
cpe:2.3:a:linecorp:line:6.3.0.2329
-
cpe:2.3:a:linecorp:line:6.3.2.2338
-
cpe:2.3:a:linecorp:line:6.4.0.2381
-
cpe:2.3:a:linecorp:line:6.4.02389
-
cpe:2.3:a:linecorp:line:6.5.0.2411
-
cpe:2.3:a:linecorp:line:6.5.2.2431
-
cpe:2.3:a:linecorp:line:6.5.4.2441
-
cpe:2.3:a:linecorp:line:6.7.2.2497
-
cpe:2.3:a:linecorp:line:7.0.0.2545
-
cpe:2.3:a:linecorp:line:7.2.0