PT-2021-21181 · Line · Line For Windows

Published 2021-09-08 · Updated 2021-09-15 · CVE-2021-36216

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LINE for Windows versions 6.2.1.2289 and before

Description The issue allows for arbitrary code execution via malicious DLL injection.

Recommendations For versions 6.2.1.2289 and before, update to a version later than 6.2.1.2289 to resolve the issue.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2021-36216

Affected Products

Line For Windows

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-36216 · Security Note
• https://osv.dev/vulnerability/CVE-2021-36216 · Vendor Advisory
• https://hackerone.com/reports/950688 · Note
• https://t.me/cibsecurity/28532 · Telegram Post