Until the next patch is released, it is highly advised that you do not play ANY WC3 custom games, especially DotA.
An exploit was recently made public that allows a custom map to execute arbitrary code on a machine with the permissions of Warcraft 3. This includes the execution of Viruses and Trojans.
This issue has been reported to Blizzard's Hacks team, and is being given the highest priority. [strike]There is no ETA for a patch at this time.[/strike]
Update: See this sticky for more info: http://forums.battle.net/thread.html?topicId=16888549346&sid=3000
Playing custom games is fine. Just don't download any from hosts for the time being. Make sure it's a map you already have.
While this is true, if you do this be sure to take extra precautions by deleting maps you accidentally download. Otherwise, you might join a game not realizing when you had downloaded it originally and assume that it's trusted.
Q u o t e: Originally posted by 66dragon6
So that means that it will take 6 years to fix?
Rofl.
Q u o t e: Originally posted by Thekillerangel
Nobody likes a poser, maged. Take off that icon & stop trying to act like a blizzard employee. It's obvious you're just a stupid wannabe.
I'm not. A real Blizzard employee would cover this up and say it's not possible... even in patch notes.
Q u o t e: What's to stop someone from making a map that looks exactly like DotA, but is so small that you don't even see a download timer?
Well, the preview image and the loading screen, for starters. If you notice that either is missing you have plenty of time to abort (even an empty map takes time to load) and if they're both in the map you have plenty of time to notice the download timer. Any informed player should be able to still play maps on bnet without much risk.
Negative. Anyone who has hosted a different version of Lost Temple knows that the download timer will pop up, but the original minimap will display until the download is done. Suppose I make a map that has the same file extension as DotA and place the same minimap, and add the minimal amount of code required to infect your computer. Assuming you have a decent connection, the download timer could be instantaneous. It'd be something to be concerned about.
Didn't they fix that in 1.23, so if you don't have the exact same map you never see the preview picture?
