風吹くままに

1/ Apple QuickTime
Apple released an update of QuickTime, fixing at least 11 security holes in it for both Mac and Windows.
Windows QuickTime users will need to use the bundled Apple Software Update application.

2/ Symantec Norton
Symantec pluged two critical holes in ActivX control(SYMADATA.DLL).
Following versions are affected:
Norton 360 1.0
Norton AntiVirus Windows 2006 - 2008
Norton Internet Security 2006 - 2008
Norton System Works 2006 - 2008

A corrected version of the ActiveX is available for download.

3/ Avast anti-virus
Avast is anti-virus scanner and is free for home users.
Avast v4.8 adds anti-rootlit and anti-spyware functionarity.
To download its free edition, access HERE.

4/ VLC Media Player
For some time now, there have been several open security holes in VLC Media Player, MPlayer and Xine. VLC was released the latest version(0.8.6f) to plug several security holes.
To download it, access HERE.

A bug in a kernel driver in Panda’s Internet-Security 2008 and Antivirus+Firewall 2008 can be exploited by attackers to escalate their privileges.

See also:
Panda Internet Security/Antivirus+Firewall 2008 cpoint.sys Kernel Driver Memory Corruption Vulnerability, security advisory from Tobias Klein
Vulnerability detected in the Internet protection level control in Panda Internet Security 2008, security advisory and hotfix download from Panda
Vulnerability detected in the Internet protection level control in Panda Antivirus + Firewall 2008,,security advisory and hotfix download from Panda

Mozilla urged users of Thunderbird to update to its new version(2.0.0.12). In its new version, Mozilla fixed five vulnerabilities. One of which is categorized as critical. This vulnerability allow that attackers can inject malicious code by means of special crafted E-Mails.

See also :
Fixed in Thunderbird 2.0.0.12
Mozilla Thunderbird MIME External-Body Heap Overflow Vulnerability

Web surfers are urged to immediately disable ActiveX controls from IE to protect against a swath of publicly reported—and unpatched—software vulnerabilities.

For more details:
http://www.eweek.com/c/a/Security/ActiveX-Under-Seige-Facebook-MySpace-Image-Uploaders-Vulnerable/
http://www.us-cert.gov/current/index.html#publicly_available_exploit_for_facebook
http://www.kb.cert.org/vuls/id/776931

Lavasoft stopped shipping updates for Ad-Aware SE Personal(Free) after Dec. 31.
If you want to continue using Ad-Aware, you can upgrade to Ad-Aware 2007 Free. But this version don't suport Windows Operating Systems prior to Windows 2000.

Download HERE

To download it, you can also click on "Download" button in the image below.