Forum Thread: Unsecure, but no patch available

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Blizzard Entertainment
And, this specific program:
Warcraft III: The Frozen Throne 1.x

This thread has been marked as locked.
DAB268 Unsecure, but no patch available
Member 26th Nov, 2009 18:23
Ranking: 0
Posts: 14
User Since: 26th Nov, 2009
System Score: N/A
Location: N/A
Hi.

PSI marks WC3: TFT as unsecure, but there's no patch available on battle.net (Northrend). What can i do?

Greetz
DAB268

Maurice Joyce RE: Unsecure, but no patch available
Handling Contributor 26th Nov, 2009 21:20
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
What is the path to the vulnerability?

FINDING A VULNERABILITY FILE PATH
=================================

To locate the exact file that the Secunia PSI has detected, use or switch to the ADVANCED interface, then :

1 Click on the + sign of the programme to "expand' it.
2 Click on Technical Details in the Toolbox to see the installation path of the detected file. (Copy (CTRL+C) & paste (CTRL+V) the Installation Path of the file back to the Forum if U are unsure what to do next)).



--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
DAB268 RE: Unsecure, but no patch available
Member 26th Nov, 2009 22:44
Score: 0
Posts: 14
User Since: 26th Nov 2009
System Score: N/A
Location: N/A
on 26th Nov, 2009 21:20, Maurice Joyce wrote:
What is the path to the vulnerability?


D:\Warcraft III\Frozen Throne.exe

Don't know, why I should post this? It's just game directory. Got this problem on 2 computers.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Unsecure, but no patch available
Handling Contributor 26th Nov, 2009 23:03
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Has your D drive got an operating system on it or is it a backup drive?


--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
DAB268 RE: Unsecure, but no patch available
Member 26th Nov, 2009 23:54
Score: 0
Posts: 14
User Since: 26th Nov 2009
System Score: N/A
Location: N/A
on 26th Nov, 2009 23:03, Maurice Joyce wrote:
Has your D drive got an operating system on it or is it a backup drive?


Nope, just the partition I install my games...
Was this reply relevant?
+0
-0
Maurice Joyce RE: Unsecure, but no patch available
Handling Contributor 27th Nov, 2009 00:08
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
If it is a backup drive there is no exposure nor can it be updated from the internet. Your main programme should be on the C drive & secure?

Just create a global ignore rule.

CREATING A GLOBAL IGNORE RULE
=============================

1.Click on the SETTINGS tab>scroll to the bottom & click on CREATE IGNORE RULE

2.In the RULE NAME BOX insert something like MY BACKUP DRIVE

3.In the RULE BOX type D:\

4.Click SAVE IGNORE RULE>CLOSE

All drives will continue to be scanned by default but the result from drive P will not be published.


23:06 26/11/2009






--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
DAB268 RE: Unsecure, but no patch available
Member 27th Nov, 2009 00:26
Score: 0
Posts: 14
User Since: 26th Nov 2009
System Score: N/A
Location: N/A
on 27th Nov, 2009 00:08, Maurice Joyce wrote:
If it is a backup drive there is no exposure nor can it be updated from the internet. Your main programme should be on the C drive & secure?


Nope, it's the main game I am playing it from this folder. And there is no update by connecting to Bnet, so this should be a problem by PSI I think. Only the Beta-Server could have an update, but afaik PSI doesn't count beta versions.
Was this reply relevant?
+0
-0
This user no longer exists RE: Unsecure, but no patch available
Secunia Official 27th Nov, 2009 08:24
Hi

You can read the details about the vulnerability here:
http://secunia.com/advisories/37390/2/

According to a blue post (Blizzard Forum Admin), you should be able to patch Warcraft III: Frozen Throne to 1.24b

However, it seems we don't detect the correct file with the updated version number.

Could i ask a user with the game installed to make a software suggestion on either "game.dll" or "war3.exe"?

--
Kind regards,

Morten Hansen
Secunia PSI Support

Secunia PSI
http://secunia.com/vulnerability_scanning/personal
DAB268 RE: Unsecure, but no patch available
Member 27th Nov, 2009 08:37
Score: 0
Posts: 14
User Since: 26th Nov 2009
System Score: N/A
Location: N/A
Patch 1.24b was published in August 09 and is distributed over battle.net. So I got it already. Secunia detects WC3 as unsecure since two weeks now.
Was this reply relevant?
+0
-0
This user no longer exists RE: Unsecure, but no patch available
Secunia Official 27th Nov, 2009 10:42
Hi again

Could you locate the updated file with the correct version number and make a software suggestion with the PSI?


--
Kind regards,

Morten Hansen
Secunia PSI Support

Secunia PSI
http://secunia.com/vulnerability_scanning/personal
DAB268 RE: Unsecure, but no patch available
Member 27th Nov, 2009 12:42
Score: 0
Posts: 14
User Since: 26th Nov 2009
System Score: N/A
Location: N/A
on 27th Nov, 2009 10:42, wrote:
Could you locate the updated file with the correct version number and make a software suggestion with the PSI?


*done*
Was this reply relevant?
+0
-0
This user no longer exists RE: Unsecure, but no patch available
Secunia Official 27th Nov, 2009 13:02
Hi

We received your software suggestion, but I'm afraid we can't use it.
The Frozen Throne.exe has a file version of 1.5.0.0. and therefore not useable for detection.

Try if you can locate a file with 1.24b in the file information
(Rightclick a file and choose properties and switch to the "Details tab".

Thank you for your assisstance.


--
Kind regards,

Morten Hansen
Secunia PSI Support

Secunia PSI
http://secunia.com/vulnerability_scanning/personal
DAB268 RE: Unsecure, but no patch available
Member 27th Nov, 2009 14:19
Score: 0
Posts: 14
User Since: 26th Nov 2009
System Score: N/A
Location: N/A
The war.exe I suggested now is version 1.24.16374, which is the internal version for 1.24b.
Was this reply relevant?
+0
-0
This user no longer exists RE: Unsecure, but no patch available
Secunia Official 27th Nov, 2009 14:30
Hi again

I've tweaked our rules a bit.

Did it fix the problem?


--
Kind regards,

Morten Hansen
Secunia PSI Support

Secunia PSI
http://secunia.com/vulnerability_scanning/personal
DAB268 RE: Unsecure, but no patch available
Member 27th Nov, 2009 15:17
Score: 0
Posts: 14
User Since: 26th Nov 2009
System Score: N/A
Location: N/A
on 27th Nov, 2009 14:30, wrote:
I've tweaked our rules a bit.

Did it fix the problem?


After a full scan the problem was solved. Thx!
Was this reply relevant?
+0
-0

This thread has been marked as locked.