[Vulnerabilities] Vulnerability in the LINE Application for Windows PC Has Been Fixed
2018.06.12
[Overview]
When LINE for Windows PC is started, specific DLL(Dynamic Link Library) will be loaded. There was an issue with the DLL file search path, which allowed an attacker to cause an unintended DLL file to be loaded.
Versions before 5.8.0 for the Windows PC are affected.
[Solution]
Upon receiving the bug report, a fixed version (LINE for Windows PC version 5.8.0) was released on May 31 and all affected versions were automatically updated.
[Request to Users]
All affected apps are automatically updated upon starting up the app.
Although the aforementioned bug has been fixed, users are nevertheless recommended to use the most recent version of the LINE for Windows PC at all times to ensure optimal user experience.
[Related Links]
JVN #92265618 has been assigned to this issue
https://jvn.jp/en/jp/JVN92265618/index.html
LINE Corporataion would like to thank Beyond Security for reporting this vulnerability, allowing the error in the program to be fixed without delay.
LINE Corporataion will continue to strive to ensure the highest security standards, and perform updates to provide a safe user environment.
[Update History]
Updated June 12, 2018