Tools of the Trade - SegFault Free!

Things have been slow on the tool update front....so I have had expanded into other common programs that security professional might use.

1) Adobe Reader 7.0.9 was released on Jan 10th. This release fixes a very serious arbitrary code execution vulnerability. Adobe Reader 8.0 was immune to this vulnerability however. I would recommend moving to Reader 8.0.

2) PhpMyAdmin 2.9.2-rc1 was released on Jan 10th. This fixes several very serious vulnerabilities. This application has always been a ripe target for malicious hackers.

3) Of course, Microsoft released several patches on Black Tuesday. If you aren't using Microsoft Update yet, make sure you visit both Windows Update and Office Update to get all the patches. Expect more Office patches in Feb. Double check and make sure you install MS07-004.

4) Opera released v9.10 on Jan 5th, 2007. This release fixed two very serious security vulnerabilities.

5) On Jan 4th, OpenOffice and StarOffice was both updated to fix several high-risk vulnerabilities. Upgrade to OpenOffice 2.1.0 and install Patch 5 for StarOffice 8.

6) Filezilla 2.2.30a was released on Jan 2nd. This release fixes two security vulnerabilities and therefore it is a required upgrade.

Fixed bugs:

• Fixed buffer overflow in transfer queue
• Fixed buffer overflow if using registry to store settings
• Local file list could freeze and stop responding

7) NessusClient 1.02 was recently on Jan 2nd. This new version improves the stability of the client when processing malformed preferences files and fixes an error when counting the number of vulnerability a scan found.

8) On Dec 23rd, Paint.Net v3.0 Beta 3 was released. This program is great for your basic photo/screenshot editing needs.