Threats tagged 'ghsa-4g7h-mgvw-cqjw'

A critical vulnerability exists in Qihoo 360 devices D621-2, D603-2, D600-2, D619, D606-6, and D706 up to firmware version 6.4.9. The flaw resides in the verify_sign function of the Firmware Signature Verification component, allowing improper verification of cryptographic signatures due to manipulation of the sign argument. This vulnerability can be exploited remotely and has publicly disclosed exploit code. The vendor has not responded to disclosure attempts, and no patch information is available.