Lucene search

JpcertCVE-2016-1156

HistoryFeb 19, 2016 - 7:59 p.m.

CVE-2016-1156

2016-02-1919:59:02

CWE-20

jpcert

web.nvd.nist.gov

cve

2016

1156

windows

os x

denial of service

nvd

security vulnerability

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

CVSS3

5.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

AI Score

5.2

Confidence

High

EPSS

0.002

Percentile

61.9%

JSON

LINE 4.3.0.724 and earlier on Windows and 4.3.1 and earlier on OS X allows remote authenticated users to cause a denial of service (application crash) via a crafted post that is mishandled when displaying a Timeline.

Affected configurations

Nvd

Node

applemac_os_x

AND

linecorplineRange≤4.3.1macos

Node

microsoftwindows

AND

linecorplineRange≤4.3.0.724windows

VendorProductVersionCPE
applemac_os_x*cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
linecorpline*cpe:2.3:a:linecorp:line:*:*:*:*:*:macos:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
linecorpline*cpe:2.3:a:linecorp:line:*:*:*:*:*:windows:*:*

Vendor	Product	Version	CPE
apple	mac_os_x	*	cpe:2.3:o:apple:mac_os_x::::::::
linecorp	line	*	cpe:2.3:a:linecorp:line::::::macos::*
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::
linecorp	line	*	cpe:2.3:a:linecorp:line::::::windows::*

References

jvn.jp/en/jp/JVN46044093/index.html

jvndb.jvn.jp/jvndb/JVNDB-2016-000029

linecorp.com/ja/security/article/53

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

CVSS3

5.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

AI Score

5.2

Confidence

High

EPSS

0.002

Percentile

61.9%

JSON

Related for CVE-2016-1156