Vulnerability Details CVE-2022-29505
Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege escalation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 20.6%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 4.4
Products affected by CVE-2022-29505
-
cpe:2.3:a:linecorp:line:4.3.0.724
-
cpe:2.3:a:linecorp:line:4.7.0
-
cpe:2.3:a:linecorp:line:4.8.2.1125
-
cpe:2.3:a:linecorp:line:5.21.3.2086
-
cpe:2.3:a:linecorp:line:5.22.0.2111
-
cpe:2.3:a:linecorp:line:5.8.0
-
cpe:2.3:a:linecorp:line:6.2.1.2289
-
cpe:2.3:a:linecorp:line:6.2.2.2293
-
cpe:2.3:a:linecorp:line:6.3.0.2329
-
cpe:2.3:a:linecorp:line:6.3.2.2338
-
cpe:2.3:a:linecorp:line:6.4.0.2381
-
cpe:2.3:a:linecorp:line:6.4.02389
-
cpe:2.3:a:linecorp:line:6.5.0.2411
-
cpe:2.3:a:linecorp:line:6.5.2.2431
-
cpe:2.3:a:linecorp:line:6.5.4.2441
-
cpe:2.3:a:linecorp:line:6.7.2.2497
-
cpe:2.3:a:linecorp:line:7.0.0.2545
-
cpe:2.3:a:linecorp:line:7.2.0