Warcraft III JASS Interpreter Arbitrary Code Execution
SECUNIA ADVISORY ID: SA37390
VERIFY ADVISORY: http://secunia.com/advisories/37390/
DESCRIPTION: Some vulnerabilities have been reported in Warcraft III: The Frozen Throne, which can be exploited by malicious people to potentially compromise a user’s system.
The vulnerabilities are caused due to errors within the JASS script handling, which can be exploited to e.g. execute arbitrary code by tricking a user into loading a specially crafted map.
SOLUTION: Partially fixed in version 1.24b.
PROVIDED AND/OR DISCOVERED BY: Reported by the vendor.
ORIGINAL ADVISORY: http://forums.battle.net/thread.html?topicId=16888549346
———————————————————————-
