About Me

David Marcus

David Marcus
Director, Security Research
Dave Marcus currently serves as Director of Security Research for McAfee® Labs, focusing on bringing McAfee’s ...

Read More

Feeds & Podcasts

Blogs

Meet the Bloggers

Archive

Tags

#SecChat $1 million guarantee 12 Scams of Christmas access to live fraud resolution agents Acquisition Alex Thurber Android antivirus Apple botnet Channel Partners cloud security Compliance Consumer counter identity theft credit card fraud and protection credit fraud alerts credit monitoring credit monitoring and resolution critical infrastructure Cyber Security Mom cyberbullying Cybercrime cybermom data breach data center data center security Data Protection Dave DeWalt DLP Email & Web Security embedded encryption Endpoint Protection enterprise facebook fake anti-virus software Family Safety Friday Security Highlights global threat intelligence google government Hacktivism how to talk to kids how to talk to teens identity fraud identity fraud scams identity protection identity protection $1 million guarantee identity protection fraud identity protection surveillance identity surveillance identity theft identity theft expert identity theft fraud identity theft protection identity theft protection product Identity thieves and cybercriminals intel iphone kids online behavior lost wallet protection malware McAfee McAfee Channel McAfee Family Protection McAfee Identity Protection McAfee Initiative to Fight Cybercrime McAfee Labs McAfee security products Mid-Market Mobile mobile malware mobile security monitor credit and personal information Network Security online personal data protection online safety Operation Aurora PCI personal identity theft fraud personal information loss personal information protection phishing privacy proactive identity protection proactive identity surveillance Public Sector restore credit and personal identity Risk and Compliance scam scams scareware security smartphones social media social networking social networks spam Stuxnet twitter vulnerability Web 2.0 work with victim restore identity

McAfee Labs :

McAfee Coverage of the Microsoft Emergency Release

Thursday, October 23, 2008 at 1:50pm by David Marcus
David Marcus

Due to the MS08-067 out-of-cycle release from Microsoft today we are in the process of releasing emergency DATs/coverage updates for many of our products and technologies. We are also working on an emergency Security Advisory as well.

Current state for each of the content areas is as follows:

Malware – Emergency DAT cut and testing in progress. ETA of 2 – 3 hours.

HIPS – Generic buffer overflow should provide coverage.

Intrushield – Partial existing coverage. Additional emergency sigset releasing today.

Foundstone – Emergency signatures being released today.

V-Flash – Emergency signatures being released today.

MNAC – Emergency signatures being released today.

VirusScan Enterprise BOP – Should provide coverage for the buffer overflow.

We will continue to monitor this critical event to provide the most comprehensive coverage we can.

Bookmark and Share

Submit your own comments / message for this post

Your email is never published nor shared. Required fields are marked *

 

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Comments (2)

  • Daniel November 3, 2008 6:30AM

    After testing a PoC vulnerability exploit against a Windows XP computer with SP3 and DEP enabled, I found that VirusScan 8.x buffer overflow protection also blocks the exploit attack.

    Reply
  • Nathan October 24, 2008 8:25AM

    After testing with PoC vulnerability code for this issue, I have found that existing HIPS signatures cover this issue with signature ID 3768, “Windows Server Service Buffer Overflow Vulnerability (Tighter Security)”, resulting in a Prevent action by default.

    This is due to the similarity between MS08-067 and the MS06-040 this signature originally covered.

    Reply