Tuesday, April 24, 2007

Tools of the Trade - Healthier Than That New Car Smell

Over the last few years, research has suggested that the "new car smell" is pretty toxic...

The Ecology Center said toxic chemicals such as bromine, chlorine and lead found in cars' interiors give off harmful fumes for three years.

http://www.physorg.com/news96654868.html (2007)
http://www.cnn.com/2006/AUTOS/01/31/toxic_cars/ (2006)

--------------------------------------

On to the tools...

1) On April 24th, Nullsoft released Winamp 5.34. The version history hasn't been updated yet for this version, but I hope they fixed MAT File Handling NULL Byte Overwrite vulnerability.

2) On April 23th, Adobe released Shockwave Player v10.2.0.021.

3) On April 23th, Irfan Skiljan released IrfanView v4.00. IrfanView is a very fast, small, compact and innovative FREEWARE (for non-commercial use) graphic viewer for Windows 9x/ME/NT/2000/XP/2003/Vista. I have personally used IrfanView for many years and I love it. It is quick and can open many different formats. However, looking over the changelog I see no reference to fixing the ANI buffer overflow vulnerability that existed in v3.99.

4) On April 20th, AVG Free Edition 7.5.463 was released. AVG Free Edition is the well-known anti-virus protection tool. AVG Free is available free-of-charge to home users for the life of the product! See the change log for all the details.

5) On April 18th, Mozilla released Thunderbird 2.0. Check out the release notes for all the new features.

6) On April 18th, GNU Image Manipulation Program (GIMP) 2.2.14 was released. The GIMP is a multiplatform photo manipulation tool. GIMP is an acronym for GNU Image Manipulation Program. The GIMP is suitable for a variety of image manipulation tasks, including photo retouching, image composition, and image construction.

7) On April 17th, CCleaner v1.39.502 was released. CCleaner is a freeware system optimization and privacy tool. It removes unused files from your system - allowing Windows to run faster and freeing up valuable hard disk space. It also cleans traces of your online activities such as your Internet history.

8) On April 16th, KeePass 1.07 was released. KeePass is a free/open-source password manager or safe which helps you to manage your passwords in a secure way. See the changelog for all the details.

9) On April 12th, ClamAV 90.2 was released. Clam AntiVirus is an open source (GPL) anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways.

10) Recently, NoScript 1.1.4.8.070420 was released. This version has been tilted the "XSS Sniper" because it has improved precision of the Anti-XSS protection, enhanced also by configurable exceptions and an "Unsafe Reload" command to deal with very few remaining false positives.

11) I ran across these unique fuzzers and just wanted to share them here.

FuzzMan is a fuzzer generator based on unix man pages. Extracts offered options from a man page and creates a shell script that will execute a command using all possible combinations of options and arguments. JavaFuzz is a Java class fuzzer based on the the Java Reflection API. The reflection API represents, or reflects, the classes, interfaces, and objects in the current Java Virtual Machine. Using the reflection API it can contruct and invoke any given class (or list of classes). After getting the types that a class accepts will construct the classes using inappropriate values. JavaFuzz is also hosted at Google Projects with source code.

No comments:

Post a Comment