McAfee Security Brief: Urgent Microsoft IE Advisory

Variol (Farseer) Elmwood · 12-21-2008, 08:41 PM

Is this legit and did anyone else get it?

Add subscriptions@mcafee.com to your address book to ensure we reach your inbox.
Security Brief
line break
Microsoft Internet Explorer Vulnerability Exposed
line break
What Is This About?

Microsoft has released a patch to address a critical remote-code-execution vulnerability in Microsoft Internet Explorer. The MS08-078 bulletin (Microsoft Internet Pointer Reference Memory Corruption Vulnerability) addresses the vulnerability for Microsoft Internet Explorer versions 5.01, 6, 7, and 8 Beta 2 running on Windows 2000 SP4, XP SP3, Server 2003 SP1, Vista SP1 and certain Server 2008 configurations.

Main threat sources: E-Mail; Locally logged-on user; Web
Threat level: Critical.
Solutions: On December 17, Microsoft released a patch to address this issue.

General risks consist of:

Access and potential theft of personal data
Personal pass code access and theft

How Do I Find Out More?

Learn more here.

How This Affects You

A vulnerability in Microsoft Internet Explorer may allow remote code execution. Exploitation would require users to visit a website that has specially crafted, nested XML tags.

Potential is high for infected users to experience the access and possible theft of personal information and data.

Stay Protected!

To ensure the best protection, McAfee advises you to download the latest MSFT patch for this Internet Explorer vulnerability.

Download the patch now.
Security Resources
McAfee Threat Center
Blogs, Tips & Insight from McAfee® Avert® Labs researchers.
McAfee Advice Center
Advice and articles on security.
FreeScan checks for PC viruses
Install the Latest Protection
Current McAfee Subscribers
1. Connect to the Internet.
2. Right-click the "M" icon in your system tray, near the clock.
3. Click Updates.
Note: By default, McAfee products update automatically.
New Users
Save 50% on McAfee Total Protection.
Or try it free for 30 days.
[ You are currently subscribed as: [email]...

Please do not send a reply to this email. For support-related questions, go here.

If you have a question or concern about your McAfee account, go here.

Legal Note: This software does not guarantee protection against all possible threats.

Important: If your McAfee product came as part of a corporate license program, see your IT administrator regarding renewal or upgrade procedures.

Subscribe: For help purchasing your McAfee subscription, please call (866)622-3911.

Unsubscribe: If you prefer not to receive email from McAfee, opt-out here.

View our privacy policy.

McAfee, VirusScan, SiteAdvisor, and/or other noted McAfee related products contained herein are registered trademarks or trademarks of McAfee, Inc., and/or its affiliates in the US and/or other countries. McAfee Red in connection with security is distinctive of McAfee brand products. Any other non-McAfee related products, registered and/or unregistered trademarks contained herein is only by reference and are the sole property of their respective owners.

McAfee, Inc. 3965 Freedom Circle, Santa Clara, CA 95054
Toll-Free: (866)622-3911
©2008 McAfee, Inc. All Rights Reserved.

Bungleau · 12-21-2008, 09:17 PM

Have I gotten that ? No.

Did IE just have a major security flaw exposed? Yes.

Did MS just release an immediate patch for that flaw? Yes.

So if you're in doubt, I'd run Windows Update to get the latest IE patch, and manually go to McAfee to download their latest.

Variol (Farseer) Elmwood · 12-21-2008, 09:47 PM

Ok, I have not run an update for a week or two.

Is this something to do with the Hallmark virus?

Spirits Reborn · 12-21-2008, 10:28 PM

People still use Ie?

Bungleau · 12-21-2008, 10:33 PM

Don't know the details on it. I let Windows auto-update run (but install only when I say it's okay), and use FF for most browsing needs.

Ilander · 12-21-2008, 11:15 PM

Felix The Assassin · 12-21-2008, 11:26 PM

Quote:

Originally Posted by Ilander

Oh, IIander, I'm loving it.

VM;
McAfee Corporate Headquarters:
3965 Freedom Circle
Santa Clara, CA 95054
USA
Phone: 1-866-736-3971
Is their real info.

The number you posted is their home user sales line.

Ilander · 12-21-2008, 11:33 PM

Yeah...I think my mother's going to start using it, as soon as she gets broadband.

Windows, though, is pretty safe behind dial-up.

12-21-2008, 08:41 PM	#1
Variol (Farseer) Elmwood Jack Burton Join Date: May 16, 2003 Location: Dartmouth, NS Canada Age: 58 Posts: 5,634	McAfee Security Brief: Urgent Microsoft IE Advisory Is this legit and did anyone else get it? Add subscriptions@mcafee.com to your address book to ensure we reach your inbox. Security Brief line break Microsoft Internet Explorer Vulnerability Exposed line break What Is This About? Microsoft has released a patch to address a critical remote-code-execution vulnerability in Microsoft Internet Explorer. The MS08-078 bulletin (Microsoft Internet Pointer Reference Memory Corruption Vulnerability) addresses the vulnerability for Microsoft Internet Explorer versions 5.01, 6, 7, and 8 Beta 2 running on Windows 2000 SP4, XP SP3, Server 2003 SP1, Vista SP1 and certain Server 2008 configurations. Main threat sources: E-Mail; Locally logged-on user; Web Threat level: Critical. Solutions: On December 17, Microsoft released a patch to address this issue. General risks consist of: Access and potential theft of personal data Personal pass code access and theft How Do I Find Out More? Learn more here. How This Affects You A vulnerability in Microsoft Internet Explorer may allow remote code execution. Exploitation would require users to visit a website that has specially crafted, nested XML tags. Potential is high for infected users to experience the access and possible theft of personal information and data. Stay Protected! To ensure the best protection, McAfee advises you to download the latest MSFT patch for this Internet Explorer vulnerability. Download the patch now. Security Resources McAfee Threat Center Blogs, Tips & Insight from McAfee® Avert® Labs researchers. McAfee Advice Center Advice and articles on security. FreeScan checks for PC viruses Install the Latest Protection Current McAfee Subscribers 1. Connect to the Internet. 2. Right-click the "M" icon in your system tray, near the clock. 3. Click Updates. Note: By default, McAfee products update automatically. New Users Save 50% on McAfee Total Protection. Or try it free for 30 days. [ You are currently subscribed as: [email]... Please do not send a reply to this email. For support-related questions, go here. If you have a question or concern about your McAfee account, go here. Legal Note: This software does not guarantee protection against all possible threats. Important: If your McAfee product came as part of a corporate license program, see your IT administrator regarding renewal or upgrade procedures. Subscribe: For help purchasing your McAfee subscription, please call (866)622-3911. Unsubscribe: If you prefer not to receive email from McAfee, opt-out here. View our privacy policy. McAfee, VirusScan, SiteAdvisor, and/or other noted McAfee related products contained herein are registered trademarks or trademarks of McAfee, Inc., and/or its affiliates in the US and/or other countries. McAfee Red in connection with security is distinctive of McAfee brand products. Any other non-McAfee related products, registered and/or unregistered trademarks contained herein is only by reference and are the sole property of their respective owners. McAfee, Inc. 3965 Freedom Circle, Santa Clara, CA 95054 Toll-Free: (866)622-3911 ©2008 McAfee, Inc. All Rights Reserved. __________________ A MAN WHO WANTS FOR NOTHING HAS INFINITE WEALTH. (me) Last edited by Variol (Farseer) Elmwood; 12-21-2008 at 09:36 PM.

12-21-2008, 09:17 PM	#2
Bungleau 40th Level Warrior Join Date: October 29, 2001 Location: Western Wilds of Michigan Posts: 11,752	Re: McAfee Security Brief: Urgent Microsoft IE Advisory Have I gotten that ? No. Did IE just have a major security flaw exposed? Yes. Did MS just release an immediate patch for that flaw? Yes. So if you're in doubt, I'd run Windows Update to get the latest IE patch, and manually go to McAfee to download their latest. __________________ B Save Early, Save Often Save Before, Save After Two-Star General, Spelling Soldiers -+-+-+ Give 'em a hug one more time. It might be the last.

12-21-2008, 09:47 PM	#3
Variol (Farseer) Elmwood Jack Burton Join Date: May 16, 2003 Location: Dartmouth, NS Canada Age: 58 Posts: 5,634	Re: McAfee Security Brief: Urgent Microsoft IE Advisory Ok, I have not run an update for a week or two. Is this something to do with the Hallmark virus? __________________ A MAN WHO WANTS FOR NOTHING HAS INFINITE WEALTH. (me)

12-21-2008, 10:28 PM	#4
Spirits Reborn Anubis Join Date: February 21, 2005 Location: .... Age: 35 Posts: 2,473	Re: McAfee Security Brief: Urgent Microsoft IE Advisory People still use Ie? __________________ Spirit's 3d Dump, Check it out!

12-21-2008, 10:33 PM	#5
Bungleau 40th Level Warrior Join Date: October 29, 2001 Location: Western Wilds of Michigan Posts: 11,752	Re: McAfee Security Brief: Urgent Microsoft IE Advisory Don't know the details on it. I let Windows auto-update run (but install only when I say it's okay), and use FF for most browsing needs. __________________ B Save Early, Save Often Save Before, Save After Two-Star General, Spelling Soldiers -+-+-+ Give 'em a hug one more time. It might be the last.

12-21-2008, 11:15 PM	#6
Ilander 20th Level Warrior Join Date: December 28, 2003 Location: Kentucky Age: 38 Posts: 2,820	Re: McAfee Security Brief: Urgent Microsoft IE Advisory __________________ Is that what you really want to say?

12-21-2008, 11:33 PM	#8
Ilander 20th Level Warrior Join Date: December 28, 2003 Location: Kentucky Age: 38 Posts: 2,820	Re: McAfee Security Brief: Urgent Microsoft IE Advisory Yeah...I think my mother's going to start using it, as soon as she gets broadband. Windows, though, is pretty safe behind dial-up. __________________ Is that what you really want to say?

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Stupid Freaking Virus and Even More Stupid McAfee!	Larry_OHF	General Discussion	23	11-20-2006 12:49 PM
Microsoft Internet Explorer Security Issues	Knightscape	General Conversation Archives (11/2000 - 01/2005)	0	06-28-2004 02:09 AM
ALERT: Microsoft Explorer v5.01 through v6.00 Critical Security Patch	Ziroc	General Conversation Archives (11/2000 - 01/2005)	13	02-16-2002 04:42 PM
Latest Microsoft Security Patch	Ladyzekke	General Conversation Archives (11/2000 - 01/2005)	7	12-15-2001 09:14 PM
snow advisory....	Garnet FalconDance	General Conversation Archives (11/2000 - 01/2005)	4	11-28-2001 06:59 PM