Warcraft III: The Frozen Throne JASS Interpreter Multiple Remote Code Execution Vulnerabilities
BID:37052
Info
Warcraft III: The Frozen Throne JASS Interpreter Multiple Remote Code Execution Vulnerabilities
| Bugtraq ID: | 37052 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 18 2009 12:00AM |
| Updated: | Nov 18 2009 06:16PM |
| Credit: | Reported by the vendor |
| Vulnerable: |
Blizzard Entertainment Warcraft III: The Frozen Throne 1.24a Blizzard Entertainment Warcraft III: The Frozen Throne 1.24 |
| Not Vulnerable: |
Blizzard Entertainment Warcraft III: The Frozen Throne 1.24b |
Discussion
Warcraft III: The Frozen Throne JASS Interpreter Multiple Remote Code Execution Vulnerabilities
Warcraft III: The Frozen Throne is prone to multiple remote code-execution vulnerabilities.
An attacker can exploit these issues to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
Versions prior to Warcraft III 1.24b are vulnerable.
Warcraft III: The Frozen Throne is prone to multiple remote code-execution vulnerabilities.
An attacker can exploit these issues to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
Versions prior to Warcraft III 1.24b are vulnerable.
Exploit / POC
Warcraft III: The Frozen Throne JASS Interpreter Multiple Remote Code Execution Vulnerabilities
Reports indicate that this issue is being exploited in the wild.
Reports indicate that this issue is being exploited in the wild.
Solution / Fix
Warcraft III: The Frozen Throne JASS Interpreter Multiple Remote Code Execution Vulnerabilities
Solution:
The vendor has released updates and an advisory. Please see the references for details.
Solution:
The vendor has released updates and an advisory. Please see the references for details.
References
Warcraft III: The Frozen Throne JASS Interpreter Multiple Remote Code Execution Vulnerabilities
References:
References:
- Vendor Homepage (Blizzard Entertainment)
- Warcraft III Custom Map Security Warning (Karune)