CVE-2006-1198

Comvigo IM Lock 2006 uses a simple substitution cipher to encrypt a password stored in the msnvsprc registry value, for which all users have Read permission, which allows local users to bypass the product’s blocking functionality by decrypting the password.

Date published : 2006-03-13

http://www.securityfocus.com/bid/16988

http://www.securityfocus.com/archive/1/426935/100/0/threaded