• Log InLog In
  • Register
Liquid`
Team Liquid Liquipedia
EDT 09:40
CEST 15:40
KST 22:40
  • Home
  • Forum
  • Calendar
  • Streams
  • Liquipedia
  • Features
  • Store
  • EPT
  • TL+
  • StarCraft 2
  • Brood War
  • Smash
  • Heroes
  • Counter-Strike
  • Overwatch
  • Liquibet
  • Fantasy StarCraft
  • TLPD
  • StarCraft 2
  • Brood War
  • Blogs
Forum Sidebar
Events/Features
News
Featured News
[ASL19] Finals Recap: Standing Tall3HomeStory Cup 27 - Info & Preview18Classic wins Code S Season 2 (2025)16Code S RO4 & Finals Preview: herO, Rogue, Classic, GuMiho0TL Team Map Contest #5: Presented by Monster Energy6
Community News
Flash Announces Retirement From ASL19Weekly Cups (June 23-29): Reynor in world title form?12FEL Cracov 2025 (July 27) - $8000 live event16Esports World Cup 2025 - Final Player Roster14Weekly Cups (June 16-22): Clem strikes back1
StarCraft 2
General
The SCII GOAT: A statistical Evaluation Weekly Cups (June 23-29): Reynor in world title form? StarCraft Mass Recall: SC1 campaigns on SC2 thread How does the number of casters affect your enjoyment of esports? Esports World Cup 2025 - Final Player Roster
Tourneys
FEL Cracov 2025 (July 27) - $8000 live event HomeStory Cup 27 (June 27-29) WardiTV Mondays SOOPer7s Showmatches 2025 $200 Biweekly - StarCraft Evolution League #1
Strategy
How did i lose this ZvP, whats the proper response Simple Questions Simple Answers
Custom Maps
[UMS] Zillion Zerglings
External Content
Mutation # 480 Moths to the Flame Mutation # 479 Worn Out Welcome Mutation # 478 Instant Karma Mutation # 477 Slow and Steady
Brood War
General
Where did Hovz go? [ASL19] Finals Recap: Standing Tall Flash Announces Retirement From ASL ASL20 Preliminary Maps BW General Discussion
Tourneys
[Megathread] Daily Proleagues [BSL20] GosuLeague RO16 - Tue & Wed 20:00+CET The Casual Games of the Week Thread [BSL20] ProLeague LB Final - Saturday 20:00 CET
Strategy
Simple Questions, Simple Answers I am doing this better than progamers do.
Other Games
General Games
Stormgate/Frost Giant Megathread Nintendo Switch Thread Path of Exile What do you want from future RTS games? Beyond All Reason
Dota 2
Official 'what is Dota anymore' discussion
League of Legends
Heroes of the Storm
Simple Questions, Simple Answers Heroes of the Storm 2.0
Hearthstone
Heroes of StarCraft mini-set
TL Mafia
TL Mafia Community Thread Vanilla Mini Mafia
Community
General
US Politics Mega-thread Stop Killing Games - European Citizens Initiative Things Aren’t Peaceful in Palestine Trading/Investing Thread Russo-Ukrainian War Thread
Fan Clubs
SKT1 Classic Fan Club! Maru Fan Club
Media & Entertainment
Anime Discussion Thread [Manga] One Piece [\m/] Heavy Metal Thread Korean Music Discussion
Sports
2024 - 2025 Football Thread NBA General Discussion Formula 1 Discussion TeamLiquid Health and Fitness Initiative For 2023 NHL Playoffs 2024
World Cup 2022
Tech Support
Computer Build, Upgrade & Buying Resource Thread
TL Community
The Automated Ban List
Blogs
from making sc maps to makin…
Husyelt
Blog #2
tankgirl
Game Sound vs. Music: The Im…
TrAiDoS
StarCraft improvement
iopq
Heero Yuy & the Tax…
KrillinFromwales
Trip to the Zoo
micronesia
Customize Sidebar...

Website Feedback

Closed Threads



Active: 564 users

New WC3 security exploit(for those who still play)

Forum Index > General Games
Post a Reply
Goldfish
Profile Blog Joined August 2010
2230 Posts
Last Edited: 2011-01-06 09:00:33
January 06 2011 08:50 GMT
#1
Not sure where to post this actually, but since this is actually not that "new" of an exploit (Found since October 2010) and Blizzard still hasn't patched it or even mentioned it (as opposed as to the previous one which was mentioned and patched fast), I wanted to post it here as a warning.

From hiveworkshop which was from thehelper.

Post describing possibilities.

The exploit allows any malicious map maker (or map hoster) to insert code which downloads a file anywhere on your computer the next time you restart your computer (after loading the malicious WC3 map that is).

Possible usages includes downloading files to your startup folder or overwriting existing popular program files (skype, steam, etc) with maliciously modified versions for example.

Basically don't download or join random or odd WC3 custom maps (host your own games using maps you know are "clean" [maps that you played dozens of times without any problems]).

Fortunately the exploit hasn't been taken that much advantage of yet but I think it's still worth a mention in case you do play random WC3 games a lot and you have things you do not want to have taken over or lose (battle.net account passwords in case a keylogger gets downloaded to some location where it can be run through some program or autostart, etc).

Existing maps people have been playing for ages are probably safe and popular maps are safe too (well known authors of maps would not likely inject malicious code into their maps).

However there could be "clone maps" which have the same name and preview but with the malicious code in the map; those maps are the ones to watch out for (if you see you're DLing a map you already own, you should leave right away).
https://connect.microsoft.com/WindowsServerFeedback/feedback/details/741495/biggest-explorer-annoyance-automatic-sorting-windows-7-server-2008-r2-and-vista#details Allow Disable Auto Arrange in Windows 7+
Manit0u
Profile Blog Joined August 2004
Poland17242 Posts
January 06 2011 09:16 GMT
#2
Now that's pretty scary... Although, when I still played, whenever I saw I'm dling map I already own I always left. Not from the fear of malicious software but because I thought someone has rigged the map to favor them somehow.
Time is precious. Waste it wisely.
FindingPride
Profile Blog Joined July 2010
United States1001 Posts
January 06 2011 09:32 GMT
#3
Thanks for heads up.. this really pisses me off as it has happened before = /
Benjef
Profile Blog Joined December 2010
United Kingdom6921 Posts
January 06 2011 21:37 GMT
#4
Thanks for the heads up, luckily I just stick to the normal TDs, DoTa and Risk games.
<3 | Dota 2 | DayZ | <3
Puosu
Profile Blog Joined April 2007
6985 Posts
January 06 2011 21:45 GMT
#5
iirc. this happened to BW a few years ago but was fixed rather quickly, lets hope the same happens for WC3. It's rather sad to see something like this happen to a reputable company like Blizzard but I guess there'll always be holes to abuse.
Celadan
Profile Joined September 2010
Norway471 Posts
Last Edited: 2011-01-06 21:54:18
January 06 2011 21:53 GMT
#6
hmm i guess il stay of wc3(havent really played it so much lately tho)
спеціальна Тактика
LittLeD
Profile Joined May 2010
Sweden7973 Posts
January 06 2011 22:01 GMT
#7
Ill stick to my usual Legion/Eeve TD, Random Dota games and occasional ladder matches :D
Thanks for the headsup!
☆Grubby ☆| Tod|DeMusliM|ThorZaiN|SaSe|Moon|Mana| ☆HerO ☆
jnkw
Profile Joined November 2010
Canada347 Posts
January 06 2011 22:03 GMT
#8
Just wanted to provide a reference for those who might confuse this with the previous WC3 custom map code exploit.

Old WC3 exploit (not to be confused with the one mentioned by OP) http://forums.battle.net/thread.html?topicId=16888549346&sid=3000

The exploit mentioned by the OP is a new one.
Please log in or register to reply.
Live Events Refresh
Next event in 2h 20m
[ Submit Event ]
Live Streams
Refresh
StarCraft 2
Harstem 392
RotterdaM 325
ForJumy 37
StarCraft: Brood War
Rain 5140
EffOrt 1344
Larva 1018
Stork 425
Mini 386
Last 226
Zeus 192
BeSt 192
ZerO 159
hero 132
[ Show more ]
Light 131
Pusan 113
Snow 110
Mind 107
Hyun 106
Sharp 105
Rush 69
Aegong 48
Shinee 32
JYJ32
Movie 29
Barracks 26
NaDa 23
ajuk12(nOOB) 15
scan(afreeca) 11
HiyA 10
Noble 10
IntoTheRainbow 10
SilentControl 8
Icarus 7
Terrorterran 5
Hm[arnc] 2
Britney 0
Stormgate
NightEnD13
Dota 2
Gorgc7669
qojqva2360
XcaliburYe393
febbydoto3
League of Legends
singsing2664
Counter-Strike
markeloff115
edward37
Super Smash Bros
Mew2King147
Heroes of the Storm
Khaldor149
Other Games
hiko881
B2W.Neo655
DeMusliM422
crisheroes221
XaKoH 188
ArmadaUGS96
ZerO(Twitch)14
Organizations
StarCraft 2
Blizzard YouTube
StarCraft: Brood War
BSLTrovo
sctven
[ Show 11 non-featured ]
StarCraft 2
• AfreecaTV YouTube
• intothetv
• Kozan
• IndyKCrew
• LaughNgamezSOOP
• Migwel
• sooper7s
StarCraft: Brood War
• BSLYoutube
• STPLYoutube
• ZZZeroYoutube
Dota 2
• C_a_k_e 2390
Upcoming Events
uThermal 2v2 Circuit
2h 20m
OSC
5h 20m
SHIN vs Bunny
Cham vs MaNa
SKillous vs TBD
PAPI vs Jumy
Gerald vs Moja
ArT vs TBD
Replay Cast
10h 20m
The PondCast
20h 20m
RSL Revival
20h 20m
ByuN vs Classic
Clem vs Cham
WardiTV European League
1d 2h
Replay Cast
1d 10h
RSL Revival
1d 20h
herO vs SHIN
Reynor vs Cure
WardiTV European League
2 days
FEL
2 days
[ Show More ]
Korean StarCraft League
2 days
CranKy Ducklings
2 days
RSL Revival
2 days
FEL
3 days
Sparkling Tuna Cup
3 days
RSL Revival
3 days
FEL
3 days
BSL: ProLeague
4 days
Dewalt vs Bonyth
Replay Cast
5 days
Replay Cast
5 days
The PondCast
6 days
Liquipedia Results

Completed

Proleague 2025-06-28
HSC XXVII
Heroes 10 EU

Ongoing

JPL Season 2
BSL 2v2 Season 3
BSL Season 20
Acropolis #3
KCM Race Survival 2025 Season 2
CSL 17: 2025 SUMMER
Copa Latinoamericana 4
Championship of Russia 2025
RSL Revival: Season 1
Murky Cup #2
BLAST.tv Austin Major 2025
ESL Impact League Season 7
IEM Dallas 2025
PGL Astana 2025
Asian Champions League '25
BLAST Rivals Spring 2025
MESA Nomadic Masters
CCT Season 2 Global Finals
IEM Melbourne 2025
YaLLa Compass Qatar 2025

Upcoming

CSLPRO Last Chance 2025
CSLPRO Chat StarLAN 3
K-Championship
uThermal 2v2 Main Event
SEL Season 2 Championship
FEL Cracov 2025
Esports World Cup 2025
StarSeries Fall 2025
FISSURE Playground #2
BLAST Open Fall 2025
BLAST Open Fall Qual
Esports World Cup 2025
BLAST Bounty Fall 2025
BLAST Bounty Fall Qual
IEM Cologne 2025
FISSURE Playground #1
TLPD

1. ByuN
2. TY
3. Dark
4. Solar
5. Stats
6. Nerchio
7. sOs
8. soO
9. INnoVation
10. Elazer
1. Rain
2. Flash
3. EffOrt
4. Last
5. Bisu
6. Soulkey
7. Mini
8. Sharp
Sidebar Settings...

Advertising | Privacy Policy | Terms Of Use | Contact Us

Original banner artwork: Jim Warren
The contents of this webpage are copyright © 2025 TLnet. All Rights Reserved.