Information

Hello everyone,

We need to let you know about an important issue with the WoW 3.3.5 game client.
There is a Remote Code Execution (RCE) exploit in the game client that allows a private server to run any arbitrary code on your computer upon login. Recently, more information about this exploit has become widely available.

Some big servers, like Warmane, use this exploit in a non-malicious way to add new functionality to the game.
However, there is a risk that a malicious server owner or hacker could use this exploit to harm your computer when you connect to a malicious private server.
Turtle WoW was just attacked a few days ago which shows that even these big projects are not always 100% secure.

It basically works like this: The malicious server in question will send a handful of carefully malformed network messages to your game client and the client will then execute all instructions that were send by the server. That could be anything, from extended game client functionality to malicious things like viruses or a cryptominer.

It also has to be mentioned that this is even easier to do on the vanilla and burning crusade clients because a certain security key was cracked already many years ago.

Thankfully a fix for that exploit was quickly shared in the WoW Modding community.

It was verified that it will lead to a client crash if a server tries to use that exploit against a fixed client.

You can download RCEPatcher, made by Stoneharry, which will fix that exploit in your WoW.exe, here: https://github.com/stoneharry/RCEPatcher/

This should close the exploit in your 3.3.5 game client.

Important Note

If you play on servers like Warmane, that use this exploit to extend Client functionality, applying the fix will break your game client.
It's a good idea to ask the server developers of the realm you play on if they are using this exploit and if it's safe to apply the fix.

Always be careful with private servers and make sure they are trustworthy.
Stay safe and enjoy your game!

EDIT: I want to add that so far there is no known malicious attempt to attack player PCs with this exploit. It's just a warning. There are also rumors that there are more RCEs in the client but i have no information regarding these.

Information

Important Note

Source: this reddit post