Ryan Naraine today posted a blog outlining to high severity security risks. One is in Trillian, the cross platform IM program and the other is in Winamp when playing MP4 files.
As Ryan notes a patch is available for the Trillian hole. I don't think there is a patch out yet for the Winamp hole. This weakness is already in circulation amongst criminals and has been seen to be used in attacks.
Read Ryan's blog for more detail.
Guy
www.authenticationworld.com
guy.huntington@authenticationworld.com

del.icio.us