Description
Geert Moernaut LSrunasE and Supercrypt use an encryption key composed of an SHA1 hash of a fixed string embedded in the executable file, which makes it easier for local users to obtain this key without reverse engineering.
References
- 20080129 Insecure Use of RC4 in LSrunasE and Supercrypt (CVE-2007-6340) mailing-list
- 27500 vdb-entry
- 3611 third-party-advisory