JVN#51565015: LINE for Windows may insecurely load Dynamic Link Libraries

LINE for Windows provided by LINE Corporation contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries.

Impact

Arbitrary code may be executed with the privileges of the running application.

Solution

Update the Software
For cuurent users of LINE for Windows, the application will automatically update to the latest version provided by the developer.
For users that will be installing LINE for Windows, the developer has provided an updated version of the installer, please use this version of the installer.

Products Affected

• LINE for Windows ver 4.7.0 and earlier
• LINE Installer for Windows ver 4.8.0 and earlier
  [Added on August 19, 2016]
  Note that LINE Installer for Windows (ver 4.8.0) did not address the vulnerability completely. Newer versions have been released.