wc3edit.net

United Warcraft 3 map hacking!
It is currently April 25th, 2024, 2:23 pm

All times are UTC




Post new topic Reply to topic  [ 9 posts ] 
Author Message
 Post subject: New Wc3 exploit
PostPosted: April 30th, 2009, 2:17 pm 
Offline
Senior Member
User avatar

Joined: January 25th, 2008, 5:20 pm
Posts: 170
Title: Lazy
Recently a very dangerous exploit was discovered within Warcraft III.
Namely, it's possible to execute bytecode through a map using Jass thus allowing practically anything, including distributing malware (viruses, trojans etc).
But, don't take my word for it, try the proof-map found here yourself (it is recommended that you run it in a window).

Source: thehelper

_________________
Image
Sig by TheWand


Top
 Profile  
 
 Post subject: Re: New Wc3 exploit
PostPosted: April 30th, 2009, 6:37 pm 
Offline
Newcomer
User avatar

Joined: March 24th, 2007, 3:56 pm
Posts: 5
thanks for the info... well unless you are almost playing in public places and you use public computers that you dont own... well you might as well wouldnt mind it... This is a good heads up for those computer cafe owners, so that they would be able to prevent any harms this exploit can bring.


Top
 Profile  
 
 Post subject: Re: New Wc3 exploit
PostPosted: May 1st, 2009, 4:47 am 
Offline
Tyrannical Drama Queen
User avatar

Joined: November 19th, 2007, 5:05 am
Posts: 5015
Dekar has confirmed this.


Top
 Profile  
 
 Post subject: Re: New Wc3 exploit
PostPosted: May 1st, 2009, 2:14 pm 
Offline
Senior Member
User avatar

Joined: January 25th, 2008, 5:20 pm
Posts: 170
Title: Lazy
for more informations you could try this link

_________________
Image
Sig by TheWand


Top
 Profile  
 
 Post subject: Re: New Wc3 exploit
PostPosted: May 4th, 2009, 10:50 am 
Offline
Member

Joined: August 17th, 2008, 5:50 am
Posts: 85
What versions of Warcraft 3 does this exploit apply to? Is it only 1.23? If a private server were to downgrade to a slightly older version would they be safe from this exploit? Lol maybe this could be an excuse to convince whatever private server you play on to downgrade from 1.23. =D


Top
 Profile  
 
 Post subject: Re: New Wc3 exploit
PostPosted: May 4th, 2009, 10:54 am 
Offline
The Flying Cow!
User avatar

Joined: November 2nd, 2007, 10:34 pm
Posts: 2247
Location: Melbourne
All.

_________________
Visit Ozzapoo.net, my blog and the home of AutoCP and Cheatpack Detector!
AutoCP3 now available for free!


Top
 Profile  
 
 Post subject: Re: New Wc3 exploit
PostPosted: May 7th, 2009, 2:53 am 
Offline
V.I.P.

Joined: December 4th, 2007, 10:24 am
Posts: 110
anyone interested in making an exploit? hehe

There's already a PoC of it which execs cmd.exe.

Dang! I'm too noob to understand all the code in PoC.

_________________
auto-collider for wc3 1.22-- @ http://iliganshack.blogspot.com


Top
 Profile  
 
 Post subject: Re: New Wc3 exploit
PostPosted: May 7th, 2009, 12:32 pm 
Offline
Forum Staff
User avatar

Joined: June 9th, 2008, 9:51 am
Posts: 685
Location: Finland
Blizzard wrote:
Warcraft III Custom Map Security Warning
We have identified an exploit that could allow malicious software to be spread through Warcraft III maps. We have applied a temporary fix to address this issue when playing on Battle.net, and we are working on a patch to permanently address the issue when playing on a LAN or playing single-player custom maps. In the meantime, we recommend that players avoid downloading maps from unofficial sources or websites they do not trust -- be aware that corrupted maps may share the same name as other popular maps. If you encounter custom maps that no longer function or other issues related to this fix, please post details below.

_________________
Image


Top
 Profile  
 
 Post subject: Re: New Wc3 exploit
PostPosted: May 28th, 2009, 3:06 pm 
Offline
Member

Joined: August 17th, 2008, 5:50 am
Posts: 85
Perhaps this link can help:

http://forums.boredaussie.com/viewtopic ... 2cc8a01d75

Note I did not make this application.
Below I have copied and pasted directly from the website part of that post:

Fixes:

I have written an application that mimics the actions of the official Blizzard hotfix for this issue. I can't and won't put any guarantees on this working or causing damage. Unlike the blizzard patch, however, you don't have to login for this to work, works for singleplayer and most likely LAN games also, I highly advise its use.

Instructions:
Extract the executable anywhere.
Run this application.
Run Warcraft III.
You should now be safe from maps that contain bad code.
You will need to do this everytime you restart Wc3.

Link: http://files.filefront.com/OverflowFixr ... einfo.html


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 9 posts ] 

All times are UTC


Who is online

Users browsing this forum: No registered users and 28 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group

phpBB SEO


Privacy Policy Statement
Impressum (German)