Security holes in two popular desktop software applications could put millions of computer users at risk of code execution attacks.

The flaws, rated “highly critical,” were flagged in the Trillian cross-platform IM program and Nullsoft’s Winamp media player.

Trillian, the multi-protocol chat tool that allows users to connect to IRC, AIM, ICQ, MSN and Yahoo within a single client, is vulnerable to three separate IRC flaws that could allow for the interception of private conversations or execution of code as the currently logged on user.