Critical bug in 40 different Windows apps

[dranfu]

Not sure if anyone has mentioned this yet, but if you're not using Secunia PSI (or similar), then now would be a good time to start

This app tracks all (or at least most) of your applications and lets you know when an application is out of date, when an update is available, when it has reached its End-Of-Life support, etc. And since a lot of these vendors will be working on patches to address this, it's a good way to stay super current on their latest patches.

Another good thing about it is that, when you have a lot of applications that like to install update programs (like Google, Adobe, Java, etc) as startup items, you don't have to choose between missing updates (by turning those auto update programs off ) or saving memory.

 

[Night Hawk]

Secunia Personal Software Inspector is the full name for that one. That's a good one there to have onhand as it does just that automatically locate updates for the various programs you have installed.

 

[Borg 386]

Securina was the one that pointed out to me that Adobe updates were leaving unsecure versions of the prior programs in my system without fully deleting them.

@#$%^&* Adobe

Agree with you both, that's a good program to have.

 

[Capt.Jack Sparrow]

Mozilla patches DLL load hijacking vulnerability

Mozilla has joined Apple in being among the first to fix the DLL load hijacking attack vector that continues to haunt hundreds of Windows applications. The open-source group released Firefox 3.6.9 with patches for a total of 15 vulnerabilities (11 rated critical), including the publicly known DLL load hijacking flaw that exposes Windows users to remote code execution attacks.
The majority of the 15 vulnerabilities in this Firefox patch batch could be exploited to launch drive-by download attacks from booby-trapped Web sites.

More: Mozilla patches DLL load hijacking vulnerability | ZDNet

 

[Phone Man]

Looks like Avast! has also fixed the problem with 5.0.677 which is now available.

"solved a vulnerability related to license files (Secunia Advisory SA41109)"

avast! Antivirus Insecure Library Loading Vulnerability - Advisories - Community

Jim

 

[Phone Man]

Here is a link from Secunia with information on affected programs and the latest status. Secunia has verified 117 programs with this problem.

Insecure Library Loading - Advisories - Community

If a program has a Green Check then click on the SAID and it will show the fix in the write up.

Jim