These vulnerabilities have been reviewed by McAfee Avert Labs, and based on their findings, McAfee recommends that users confirm the Microsoft product versioning outlined in the bulletins and update as recommended by Microsoft and McAfee. This includes deploying solutions to ensure protection against the vulnerabilities outlined in this advisory.
"Today Microsoft issued a rare out-of-cycle patch to fix vulnerabilities in GDI," said Dave Marcus, security research and communications manager, McAfee Avert Labs. "McAfee Avert Labs is always concerned when Microsoft releases an out-of-cycle patch. We urge our customers and the computing public to take this release seriously, as there has already been active exploitation of at least one of these vulnerabilities in the wild. Consumers and enterprise users should immediately evaluate this patch as well as ensure that they have up-to-date proactive security technologies in place to mitigate and manage all risk."
Microsoft Vulnerability Overview:
MS07-017 - Vulnerabilities In GDI Could Allow Remote Code Execution
Microsoft released a security advisory last week, warning customers that a vulnerability in Windows ANI files was allowing hackers to break into computers and install malicious software. The files are used to change the mouse cursor into an hourglass icon or another animated option while a program is busy. The so-called zero-day attack is aimed at PCs running Windows. McAfee was first to discover the ANI exploit and worked with Microsoft to proactively disclose this vulnerability. McAfee has rated the exploit "highly critical" and suggests that users download the patch as soon as Microsoft releases it.
McAfee has been actively updating its partners, customers and the public on this Microsoft issue via its Avert Labs security research blog available at http://www.avertlabs.com/research/blog/
With McAfee's security risk management approach, customers can effectively address business priorities and security realities. McAfee will continue to update its coverage as needed, as new exploit vectors are discovered and new threats emerge. For a complete description of McAfee's individual product coverage for the vulnerabilities announced today by Microsoft, visit http://vil.nai.com/vi l/newly_discovered_vulnerabilities.aspx
McAfee Avert Labs maintains one of the top-ranked security threat and research organizations in the world, employing security researchers in 16 countries around the globe. The Labs combines world-class malicious code and anti-virus research with intrusion prevention and vulnerability research expertise. McAfee protects customers by providing deep analysis and core technologies that are developed through the combined efforts of its researchers. McAfee Avert Labs continually monitors the Internet for new threats and attack vectors on a daily basis. Whenever possible, we will update our security technologies and coverage as these new threats and vectors emerge - McAfee.

All rss from this site
Print this article
Webmasters ! Get this feed on your site
Microsoft Corp has announced the launch of Windows Live Messenger on Xbox 360,connecting people across Xbox 360 consoles, Microsoft Windows-based PCs and Windows Mobile-powered devices.