All Blizzard Games Vunerable to DNS Rebinding

[Hazzbazzy]

Source

TLDR Malicious website could send commands to your Blizzard processes.

[ev0]

Blizzard here. We have a more robust Host header whitelist fix in QA now and will deploy soon. The executable blacklisting code is actually old and wasn’t intended to be a resolution to this issue. We're in touch with Tavis to avoid miscommunication in the future.

Their response 14 hours ago says this was patched. Sadly, there are still some more vulnerabilities on the bnet client.

[Hazzbazzy]

Their response 14 hours ago says this was patched. Sadly, there are still some more vulnerabilities on the bnet client.

I wouldn't say blocking executables is a fix tbh.