• Log InLog In
  • Register
Liquid`
Team Liquid Liquipedia
EDT 02:42
CEST 08:42
KST 15:42
  • Home
  • Forum
  • Calendar
  • Streams
  • Liquipedia
  • Features
  • Store
  • EPT
  • TL+
  • StarCraft 2
  • Brood War
  • Smash
  • Heroes
  • Counter-Strike
  • Overwatch
  • Liquibet
  • Fantasy StarCraft
  • TLPD
  • StarCraft 2
  • Brood War
  • Blogs
Forum Sidebar
Events/Features
News
Featured News
Serral wins HomeStory Cup 2914Serral wins Maestros of the Game 243ByuL, and the Limitations of Standard Play3Team Liquid Map Contest #22: Results and Winners7Code S Season 2 (2026): RO4 and Finals Preview12
Community News
SC4ALL II: Brood War - $2500 - Dec 5-64SC4ALL II announced - $10,000 prize pool, Dec 5-63PIG STY FESTIVAL 8.0! (13 - 23 August)8Neeb returns to progaming; rejoins ONSYDE15Weekly Cups (July 20-26): Early returns on 5.0.16b8
StarCraft 2
General
[Personal Project Share] Terran Defense v0.60 August World Ranking: Clem climbs to #2 Daily SC2 Player Grid - feedback wanted Balance hotfix patch 5.0.16b (July 16) Life's Huge Gambling Spree After IEM Katowice 2014
Tourneys
RSL Revival: Season 6 - Qualifiers and Main Event INu's Battles #19 2-Days Event Sparkling Tuna Cup - Weekly Open Tournament SC4ALL II announced - $10,000 prize pool, Dec 5-6 PIG STY FESTIVAL 8.0! (13 - 23 August)
Strategy
[G] Having the right mentality to improve
Custom Maps
Nexus Wars 2021 GUIDE [M] (2) Industrial Park
External Content
The PondCast: SC2 News & Results Mutation # 537 Hostile Territory Mutation # 536 Railroad Switch Mutation # 535 Assembly of Vengeance
Brood War
General
ASL22 General Discussion BW Drama: Terror's Debt Incident + C9 disbanding BW General Discussion Making an Online Broodwar Manager Game BGH Auto Balance -> http://bghmmr.eu/
Tourneys
SC4ALL II: Brood War - $2500 - Dec 5-6 [Megathread] Daily Proleagues 2v2v2v2 Tournament Escore Tournament - Season 3
Strategy
Simple Questions, Simple Answers Fighting Spirit mining rates Odyssey Mineral Stack Saturation PvT advise for noobs
Other Games
General Games
Stormgate/Frost Giant Megathread ZeroSpace Early Access is Now Live! Nintendo Switch Thread Beyond All Reason Path of Exile
Dota 2
Looking for a Dota Mentor Official 'what is Dota anymore' discussion
League of Legends
[TL LoL EUW IHs] Teemo shall perish TSM pausing esports and CLG Dead
Heroes of the Storm
Heroes of the Storm 2.0
Hearthstone
Deck construction bug
TL Mafia
TL Mafia Power Rank TL Mafia Community Thread NeO.D_StephenKing vs This Guy From 1 Million Dance
Community
General
Russo-Ukrainian War Thread US Politics Mega-thread European Politico-economics QA Mega-thread Artificial Intelligence Thread Things Aren’t Peaceful in Palestine
Fan Clubs
The Scarlett Fan Club The IdrA Fan Club The HerO Fan Club!
Media & Entertainment
Anime Discussion Thread Movie Discussion! Series you have seen recently... [Req][Books] Good Fantasy/SciFi books
Sports
Football (Soccer) Thread TeamLiquid Health and Fitness Initiative For 2023 Formula 1 Discussion MLB/Baseball 2023 McBoner: A hockey love story
World Cup 2022
Tech Support
Computer Build, Upgrade & Buying Resource Thread Simple Questions Simple Answers FPS when play League Of Legend on laptop
TL Community
Northern Ireland Global Starcraft The Automated Ban List
Blogs
Please support my new stand…
Peanutsc
What is a Gamer?
TrAiDoS
Hello guys!
LIN1s
ASL S22 English Commentary…
namkraft
Poker (part 2)
Nebuchad
Customize Sidebar...

Website Feedback

Closed Threads



Active: 6059 users

New WC3 security exploit(for those who still play)

Forum Index > General Games
Post a Reply
Goldfish
Profile Blog Joined August 2010
2230 Posts
Last Edited: 2011-01-06 09:00:33
January 06 2011 08:50 GMT
#1
Not sure where to post this actually, but since this is actually not that "new" of an exploit (Found since October 2010) and Blizzard still hasn't patched it or even mentioned it (as opposed as to the previous one which was mentioned and patched fast), I wanted to post it here as a warning.

From hiveworkshop which was from thehelper.

Post describing possibilities.

The exploit allows any malicious map maker (or map hoster) to insert code which downloads a file anywhere on your computer the next time you restart your computer (after loading the malicious WC3 map that is).

Possible usages includes downloading files to your startup folder or overwriting existing popular program files (skype, steam, etc) with maliciously modified versions for example.

Basically don't download or join random or odd WC3 custom maps (host your own games using maps you know are "clean" [maps that you played dozens of times without any problems]).

Fortunately the exploit hasn't been taken that much advantage of yet but I think it's still worth a mention in case you do play random WC3 games a lot and you have things you do not want to have taken over or lose (battle.net account passwords in case a keylogger gets downloaded to some location where it can be run through some program or autostart, etc).

Existing maps people have been playing for ages are probably safe and popular maps are safe too (well known authors of maps would not likely inject malicious code into their maps).

However there could be "clone maps" which have the same name and preview but with the malicious code in the map; those maps are the ones to watch out for (if you see you're DLing a map you already own, you should leave right away).
https://connect.microsoft.com/WindowsServerFeedback/feedback/details/741495/biggest-explorer-annoyance-automatic-sorting-windows-7-server-2008-r2-and-vista#details Allow Disable Auto Arrange in Windows 7+
Manit0u
Profile Blog Joined August 2004
Poland17817 Posts
January 06 2011 09:16 GMT
#2
Now that's pretty scary... Although, when I still played, whenever I saw I'm dling map I already own I always left. Not from the fear of malicious software but because I thought someone has rigged the map to favor them somehow.
Time is precious. Waste it wisely.
FindingPride
Profile Blog Joined July 2010
United States1001 Posts
January 06 2011 09:32 GMT
#3
Thanks for heads up.. this really pisses me off as it has happened before = /
Benjef
Profile Blog Joined December 2010
United Kingdom6921 Posts
January 06 2011 21:37 GMT
#4
Thanks for the heads up, luckily I just stick to the normal TDs, DoTa and Risk games.
<3 | Dota 2 | DayZ | <3
Puosu
Profile Blog Joined April 2007
7035 Posts
January 06 2011 21:45 GMT
#5
iirc. this happened to BW a few years ago but was fixed rather quickly, lets hope the same happens for WC3. It's rather sad to see something like this happen to a reputable company like Blizzard but I guess there'll always be holes to abuse.
Celadan
Profile Joined September 2010
Norway471 Posts
Last Edited: 2011-01-06 21:54:18
January 06 2011 21:53 GMT
#6
hmm i guess il stay of wc3(havent really played it so much lately tho)
спеціальна Тактика
LittLeD
Profile Joined May 2010
Sweden7973 Posts
January 06 2011 22:01 GMT
#7
Ill stick to my usual Legion/Eeve TD, Random Dota games and occasional ladder matches :D
Thanks for the headsup!
☆Grubby ☆| Tod|DeMusliM|ThorZaiN|SaSe|Moon|Mana| ☆HerO ☆
jnkw
Profile Joined November 2010
Canada347 Posts
January 06 2011 22:03 GMT
#8
Just wanted to provide a reference for those who might confuse this with the previous WC3 custom map code exploit.

Old WC3 exploit (not to be confused with the one mentioned by OP) http://forums.battle.net/thread.html?topicId=16888549346&sid=3000

The exploit mentioned by the OP is a new one.
Please log in or register to reply.
Live Events Refresh
Next event in 4h 18m
[ Submit Event ]
Live Streams
Refresh
StarCraft 2
NeuroSwarm 174
Nina 163
StarCraft: Brood War
Rain 3282
GuemChi 2051
Tasteless 325
sSak 55
Bale 46
ZergMaN 38
Noble 35
Icarus 9
Dota 2
canceldota68
League of Legends
JimRising 682
Other Games
summit1g7907
Sick188
Livibee125
Mew2King123
Happy111
Organizations
Other Games
gamesdonequick732
StarCraft 2
Blizzard YouTube
StarCraft: Brood War
BSLTrovo
[ Show 16 non-featured ]
StarCraft 2
• AfreecaTV YouTube
• intothetv
• Kozan
• IndyKCrew
• LaughNgamezSOOP
• Migwel
• sooper7s
StarCraft: Brood War
• Azhi_Dahaki17
• BSLYoutube
• STPLYoutube
• ZZZeroYoutube
Dota 2
• lizZardDota2190
League of Legends
• Rush1423
• Lourlo1190
• Stunt456
• HappyZerGling91
Upcoming Events
WardiTV Weekly
4h 18m
Patches Events
9h 18m
Sparkling Tuna Cup
1d 3h
INu's Battles
1d 4h
Percival vs Zoun
Cure vs Rogue
ByuN vs Classic
Clem vs NightMare
PiGosaur Cup
1d 17h
Replay Cast
2 days
Kung Fu Cup
2 days
Replay Cast
2 days
The PondCast
3 days
INu's Battles
3 days
[ Show More ]
Replay Cast
3 days
IntoTheTV X SOOP
4 days
RSL Revival
5 days
RSL Revival
6 days
Liquipedia Results

Completed

ASL Season 22: Qualifier #2
CranK Gathers Season 4: BW vs SC2 Team League
Eternal Conflict S2 Finale

Ongoing

KCM Race Survival 2026 Season 3
K-JUNGMAN
RSL Revival: Season 6
BLAST Bounty Summer 2026
BLAST Bounty Summer Qual
Stake Ranked Episode 3
XSE Pro League 2026
IEM Cologne Major 2026
Stake Ranked Episode 2
CS Asia Championships 2026

Upcoming

Acropolis #5
Escore Tournament S3: W6
Escore Tournament S3: W7
CSLAN 4
ASL Season 22
Escore Tournament S3: W8
Acropolis #5 - TRS
HSC XXX
SC4ALL II: StarCraft II
Kung Fu Cup 2026 Grand Finals
PiG Sty Festival 8.0
Thunderpick World Champ.
ESL Pro League Season 24
Stake Ranked Episode 4
Logitech G Connect 2026
SL StarSeries Fall 2026
FISSURE Playground #5
BLAST Open Fall 2026
Esports World Cup 2026
TLPD

1. ByuN
2. TY
3. Dark
4. Solar
5. Stats
6. Nerchio
7. sOs
8. soO
9. INnoVation
10. Elazer
1. Rain
2. Flash
3. EffOrt
4. Last
5. Bisu
6. Soulkey
7. Mini
8. Sharp
Sidebar Settings...

Advertising | Privacy Policy | Terms Of Use | Contact Us

Original banner artwork: Jim Warren
The contents of this webpage are copyright © 2026 TLnet. All Rights Reserved.