This vulnerability affects Qihoo 360 Total Security 6.0, specifically the RpcStringBindingComposeW function within the Nucleus Engine Monitoring Logic component. By manipulating the NetworkAddr argument, an attacker with local access can cause a protection mechanism failure. The vulnerability has a CVSS 4.0 score of 8.5, indicating high severity. The vendor was contacted but did not provide any response or fix. No patch or official remediation guidance is currently available, and the exploit code has been publicly released.

Successful exploitation leads to a protection mechanism failure, potentially allowing an attacker with local access to bypass security controls or protections implemented by the affected component. The high CVSS score reflects significant impact on confidentiality, integrity, and availability under local attack conditions without user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should restrict local access to trusted users only and monitor for suspicious activity related to the affected component. Avoid running untrusted code locally until a patch is released.