CVE-2006-1198 json
Comvigo IM Lock 2006 uses a simple substitution cipher to encrypt a password stored in the msnvs\prc registry value, for which all users ha…
published 2006-03-14 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-1202
- cvss
- 3.7
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.3%
- EPSS 0.3% chance of exploitation in 30 days, percentile 22%
- public exploits
- 0
- none known
Summary
Comvigo IM Lock 2006 uses a simple substitution cipher to encrypt a password stored in the msnvs\prc registry value, for which all users have Read permission, which allows local users to bypass the product's blocking functionality by decrypting the password.
Exploit prediction
0.30% chance of exploitation in the next 30 days, higher than 22% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 3.7 | AV:L/AC:H/Au:N/C:P/I:P/A:P |
References
-
secunia.com
/advisories/19140
third-party-advisory, vendor-advisory
-
securityfocus.com
/bid/16988
vdb-entry
-
securityfocus.com
/archive/1/426935/100/0/threaded
mailing-list
-
exchange.xforce.ibmcloud.com
/vulnerabilities/25219
vdb-entry
-
vupen.com
/english/advisories/2006/0866
vdb-entry
Sources
- CVE List CVE-2006-1198
- NVD CVE-2006-1198
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.