Home Computer Talk

SANTA CLARA, Calif., Oct. 9 /PRNewswire-FirstCall/ — McAfee, Inc. (NYSE: MFE), announced that it provides coverage for the nine security vulnerabilities disclosed by Microsoft Corporation today. These vulnerabilities have been reviewed by McAfee(R) Avert(R) Labs, and based on their findings, McAfee recommends that users confirm the Microsoft product versioning outlined in the bulletins and update as recommended by Microsoft and McAfee. This includes deploying solutions to ensure protection against the vulnerabilities outlined in this advisory.

“Today’s Microsoft patches emphasize the need for proactive browser protection and the risk of surfing the Web unprotected,” said Dave Marcus, security research and communications manager at McAfee Avert Labs. “Many of the vulnerabilities addressed by the fixes could be exploited if a Windows user simply clicks a malicious Web link, a favorite attack method among cybercriminals. Users need to be more careful than ever when surfing the Internet.”

Microsoft Vulnerabilities Overview:
— MS07-055 - Vulnerability in Kodak Image Viewer could allow remote code
execution
— MS07-056 - Security update for Outlook Express and Windows Mail
— MS07-057 - Cumulative security update for Internet Explorer
— MS07-058 - Vulnerability in RPC could allow denial of service
— MS07-059 - Vulnerability in Windows SharePoint Services 3.0 and Office
SharePoint Server 2007 could result in elevation of privilege within
the SharePoint Site
— MS07-060 - Vulnerability in Microsoft Word could allow remote code
execution

Scope of Potential Compromise

Today’s six security bulletins cover a total of nine vulnerabilities. Four of the bulletins are rated critical by Microsoft due to their potential for remote code execution. Two bulletins are deemed important.

For additional information on today’s vulnerabilities as well as information on current threats, visit McAfee’s Threat Center at http://www.mcafee.com/us/threat_center/default.asp. McAfee recommends users sign up to receive the McAfee Avert Labs Security Advisory, describing detailed McAfee product coverage on the set of vulnerabilities described in this document, as well as McAfee product coverage for other threats. To sign-up visit: http://www.mcafee.com/us/threat_center/securityadvisory/signup.aspx. More information on the vulnerabilities can also be found at http://www.microsoft.com/technet/security/current.aspx

computers, Microsoft, McAfee, security bulletins, Microsoft patches