CVE-2009-4768: Unspecified vulnerability in the JASS script interpreter in Warcraft III: The Frozen Throne 1.24b and earli...

Security readout for executives and security teams

This CVE concerns Warcraft III: The Frozen Throne 1.24b and earlier. A malicious custom map could trigger an unspecified flaw in the JASS script interpreter and run code on the player’s system. Business exposure is likely limited to legacy endpoints where the game is installed and users can open untrusted maps. Exposure is most plausible on legacy systems running Warcraft III: The Frozen Throne 1.24b or earlier, especially where users download or play custom maps from untrusted sources. The supplied affected-product metadata is incomplete, so asset confirmation is required. Prioritize if legacy game software exists on corporate endpoints or high-risk user systems. Otherwise, this is likely a low-prevalence legacy risk with high potential impact but narrow exposure. Mitigation focus: Inventory systems for Warcraft III: The Frozen Throne 1.24b or earlier.; Check Blizzard or vendor guidance for supported updates or replacement versions.; Block or discourage use of untrusted custom maps on managed systems..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.