• Log InLog In
  • Register
Liquid`
Team Liquid Liquipedia
EDT 23:11
CEST 05:11
KST 12:11
  • Home
  • Forum
  • Calendar
  • Streams
  • Liquipedia
  • Features
  • Store
  • EPT
  • TL+
  • StarCraft 2
  • Brood War
  • Smash
  • Heroes
  • Counter-Strike
  • Overwatch
  • Liquibet
  • Fantasy StarCraft
  • TLPD
  • StarCraft 2
  • Brood War
  • Blogs
Forum Sidebar
Events/Features
News
Featured News
[ASL19] Ro4 Recap : The Peak12DreamHack Dallas 2025 - Info & Preview19herO wins GSL Code S Season 1 (2025)17Code S RO4 & Finals Preview: herO, GuMiho, Classic, Cure6Code S RO8 Preview: Classic, Reynor, Maru, GuMiho4
Community News
[BSL20] RO20 Group Stage0EWC 2025 Regional Qualifiers (May 28-June 1)7Weekly Cups (May 12-18): Clem sweeps WardiTV May3Code S Season 2 (2025) - Qualifier Results212025 GSL Season 2 (Qualifiers)14
StarCraft 2
General
Interview with oPZesty on Cheeseadelphia/Coaching herO wins GSL Code S Season 1 (2025) DreamHack Dallas 2025 - Info & Preview Power Rank: October 2018 Code S Season 2 (2025) - Qualifier Results
Tourneys
DreamHack Dallas 2025 Last Chance Qualifiers for OlimoLeague 2024 Winter $5,100+ SEL Season 2 Championship (SC: Evo) StarCraft Evolution League (SC Evo Biweekly) EWC 2025 Regional Qualifiers (May 28-June 1)
Strategy
Simple Questions Simple Answers [G] PvT Cheese: 13 Gate Proxy Robo
Custom Maps
[UMS] Zillion Zerglings
External Content
Mutation # 474 Futile Resistance Mutation # 473 Cold is the Void Mutation # 472 Dead Heat Mutation # 471 Delivery Guaranteed
Brood War
General
ASL 19 Tickets for foreigners BW General Discussion [ASL19] Ro4 Recap : The Peak Cwal.gg not working BGH auto balance -> http://bghmmr.eu/
Tourneys
[BSL20] RO20 Group C - Saturday 20:00 CET [ASL19] Semifinal B [Megathread] Daily Proleagues [BSL20] RO20 Group Stage
Strategy
I am doing this better than progamers do. [G] How to get started on ladder as a new Z player
Other Games
General Games
Battle Aces/David Kim RTS Megathread Nintendo Switch Thread Beyond All Reason What do you want from future RTS games? Stormgate/Frost Giant Megathread
Dota 2
Official 'what is Dota anymore' discussion
League of Legends
LiquidLegends to reintegrate into TL.net
Heroes of the Storm
Simple Questions, Simple Answers
Hearthstone
Heroes of StarCraft mini-set
TL Mafia
Vanilla Mini Mafia TL Mafia Community Thread TL Mafia Plays: Diplomacy TL Mafia: Generative Agents Showdown Survivor II: The Amazon
Community
General
Russo-Ukrainian War Thread US Politics Mega-thread Things Aren’t Peaceful in Palestine European Politico-economics QA Mega-thread Trading/Investing Thread
Fan Clubs
Serral Fan Club
Media & Entertainment
[Manga] One Piece Movie Discussion! Anime Discussion Thread
Sports
2024 - 2025 Football Thread Formula 1 Discussion NHL Playoffs 2024 NBA General Discussion
World Cup 2022
Tech Support
Computer Build, Upgrade & Buying Resource Thread Cleaning My Mechanical Keyboard How to clean a TTe Thermaltake keyboard?
TL Community
The Automated Ban List TL.net Ten Commandments
Blogs
Yes Sir! How Commanding Impr…
TrAiDoS
Poker
Nebuchad
Info SLEgma_12
SLEgma_12
SECOND COMMING
XenOsky
WombaT’s Old BW Terran Theme …
WombaT
Heero Yuy & the Tax…
KrillinFromwales
Customize Sidebar...

Website Feedback

Closed Threads



Active: 11751 users

New WC3 security exploit(for those who still play)

Forum Index > General Games
Post a Reply
Goldfish
Profile Blog Joined August 2010
2230 Posts
Last Edited: 2011-01-06 09:00:33
January 06 2011 08:50 GMT
#1
Not sure where to post this actually, but since this is actually not that "new" of an exploit (Found since October 2010) and Blizzard still hasn't patched it or even mentioned it (as opposed as to the previous one which was mentioned and patched fast), I wanted to post it here as a warning.

From hiveworkshop which was from thehelper.

Post describing possibilities.

The exploit allows any malicious map maker (or map hoster) to insert code which downloads a file anywhere on your computer the next time you restart your computer (after loading the malicious WC3 map that is).

Possible usages includes downloading files to your startup folder or overwriting existing popular program files (skype, steam, etc) with maliciously modified versions for example.

Basically don't download or join random or odd WC3 custom maps (host your own games using maps you know are "clean" [maps that you played dozens of times without any problems]).

Fortunately the exploit hasn't been taken that much advantage of yet but I think it's still worth a mention in case you do play random WC3 games a lot and you have things you do not want to have taken over or lose (battle.net account passwords in case a keylogger gets downloaded to some location where it can be run through some program or autostart, etc).

Existing maps people have been playing for ages are probably safe and popular maps are safe too (well known authors of maps would not likely inject malicious code into their maps).

However there could be "clone maps" which have the same name and preview but with the malicious code in the map; those maps are the ones to watch out for (if you see you're DLing a map you already own, you should leave right away).
https://connect.microsoft.com/WindowsServerFeedback/feedback/details/741495/biggest-explorer-annoyance-automatic-sorting-windows-7-server-2008-r2-and-vista#details Allow Disable Auto Arrange in Windows 7+
Manit0u
Profile Blog Joined August 2004
Poland17238 Posts
January 06 2011 09:16 GMT
#2
Now that's pretty scary... Although, when I still played, whenever I saw I'm dling map I already own I always left. Not from the fear of malicious software but because I thought someone has rigged the map to favor them somehow.
Time is precious. Waste it wisely.
FindingPride
Profile Blog Joined July 2010
United States1001 Posts
January 06 2011 09:32 GMT
#3
Thanks for heads up.. this really pisses me off as it has happened before = /
Benjef
Profile Blog Joined December 2010
United Kingdom6921 Posts
January 06 2011 21:37 GMT
#4
Thanks for the heads up, luckily I just stick to the normal TDs, DoTa and Risk games.
<3 | Dota 2 | DayZ | <3
Puosu
Profile Blog Joined April 2007
6984 Posts
January 06 2011 21:45 GMT
#5
iirc. this happened to BW a few years ago but was fixed rather quickly, lets hope the same happens for WC3. It's rather sad to see something like this happen to a reputable company like Blizzard but I guess there'll always be holes to abuse.
Celadan
Profile Joined September 2010
Norway471 Posts
Last Edited: 2011-01-06 21:54:18
January 06 2011 21:53 GMT
#6
hmm i guess il stay of wc3(havent really played it so much lately tho)
спеціальна Тактика
LittLeD
Profile Joined May 2010
Sweden7973 Posts
January 06 2011 22:01 GMT
#7
Ill stick to my usual Legion/Eeve TD, Random Dota games and occasional ladder matches :D
Thanks for the headsup!
☆Grubby ☆| Tod|DeMusliM|ThorZaiN|SaSe|Moon|Mana| ☆HerO ☆
jnkw
Profile Joined November 2010
Canada347 Posts
January 06 2011 22:03 GMT
#8
Just wanted to provide a reference for those who might confuse this with the previous WC3 custom map code exploit.

Old WC3 exploit (not to be confused with the one mentioned by OP) http://forums.battle.net/thread.html?topicId=16888549346&sid=3000

The exploit mentioned by the OP is a new one.
Please log in or register to reply.
Live Events Refresh
Next event in 6h 49m
[ Submit Event ]
Live Streams
Refresh
StarCraft 2
RuFF_SC2 267
PiLiPiLi 20
StarCraft: Brood War
Britney 3376
NaDa 110
Icarus 9
Dota 2
monkeys_forever217
NeuroSwarm116
League of Legends
JimRising 651
Counter-Strike
flusha235
Super Smash Bros
Mew2King185
amsayoshi80
Heroes of the Storm
Khaldor134
Other Games
summit1g10641
shahzam937
WinterStarcraft332
ViBE236
PPMD30
KnowMe27
Organizations
Other Games
gamesdonequick997
StarCraft 2
Blizzard YouTube
StarCraft: Brood War
BSLTrovo
sctven
[ Show 14 non-featured ]
StarCraft 2
• Hupsaiya 78
• practicex 10
• AfreecaTV YouTube
• intothetv
• Kozan
• IndyKCrew
• LaughNgamezSOOP
• Migwel
• sooper7s
StarCraft: Brood War
• Azhi_Dahaki20
• BSLYoutube
• STPLYoutube
• ZZZeroYoutube
Other Games
• Scarra3174
Upcoming Events
Replay Cast
6h 49m
SC Evo League
8h 49m
Road to EWC
11h 49m
BSL Season 20
14h 49m
Dewalt vs TT1
UltrA vs HBO
WolFix vs TBD
Afreeca Starleague
1d 1h
BeSt vs Soulkey
Road to EWC
1d 10h
Wardi Open
2 days
SOOP
3 days
NightMare vs Wayne
Replay Cast
3 days
Replay Cast
3 days
[ Show More ]
GSL Code S
4 days
Cure vs Zoun
Solar vs Creator
The PondCast
4 days
Online Event
4 days
Clem vs ShoWTimE
herO vs MaxPax
GSL Code S
5 days
GuMiho vs Bunny
ByuN vs SHIN
Online Event
5 days
Replay Cast
5 days
Liquipedia Results

Completed

Proleague 2025-05-16
2025 GSL S1
Calamity Stars S2

Ongoing

JPL Season 2
ASL Season 19
YSL S1
BSL 2v2 Season 3
BSL Season 20
China & Korea Top Challenge
KCM Race Survival 2025 Season 2
NPSL S3
Rose Open S1
DreamHack Dallas 2025
Heroes 10 EU
ESL Impact League Season 7
IEM Dallas 2025
PGL Astana 2025
Asian Champions League '25
ECL Season 49: Europe
BLAST Rivals Spring 2025
MESA Nomadic Masters
CCT Season 2 Global Finals
IEM Melbourne 2025
YaLLa Compass Qatar 2025
PGL Bucharest 2025
BLAST Open Spring 2025
ESL Pro League S21

Upcoming

Copa Latinoamericana 4
CSLPRO Last Chance 2025
CSLAN 2025
K-Championship
SEL Season 2 Championship
Esports World Cup 2025
HSC XXVII
Championship of Russia 2025
Bellum Gens Elite Stara Zagora 2025
2025 GSL S2
BLAST Bounty Fall Qual
IEM Cologne 2025
FISSURE Playground #1
BLAST.tv Austin Major 2025
TLPD

1. ByuN
2. TY
3. Dark
4. Solar
5. Stats
6. Nerchio
7. sOs
8. soO
9. INnoVation
10. Elazer
1. Rain
2. Flash
3. EffOrt
4. Last
5. Bisu
6. Soulkey
7. Mini
8. Sharp
Sidebar Settings...

Advertising | Privacy Policy | Terms Of Use | Contact Us

Original banner artwork: Jim Warren
The contents of this webpage are copyright © 2025 TLnet. All Rights Reserved.