McAfee has announced that it provides coverage for the nine security vulnerabilities disclosed by Microsoft. These vulnerabilities have been reviewed by McAfee Avert Labs, and based on their findings, McAfee recommends that users confirm the Microsoft product versioning outlined in the bulletins and update as recommended by Microsoft and McAfee.

"Today's Microsoft patches emphasise the need for proactive browser protection and the risk of surfing the Web unprotected," said Dave Marcus, security research and communications manager at McAfee Avert Labs.

The Microsoft vulnerabilities overview include MS07-055 - Vulnerability in Kodak Image Viewer could allow remote code execution; MS07-056 - Security update for Outlook Express and Windows Mail; MS07-057 - Cumulative security update for Internet Explorer; MS07-058 - Vulnerability in RPC could allow denial of service; MS07-059 - Vulnerability in Windows SharePoint Services 3.0 and Office SharePoint Server 2007 could result in elevation of privilege within the SharePoint Site; MS07-060 - Vulnerability in Microsoft Word could allow remote code execution.

The six security bulletins cover a total of nine vulnerabilities. Four of the bulletins are rated critical by Microsoft due to their potential for remote code execution. Two bulletins are deemed important.

McAfee Host IPS and McAfee Entercept protect users against code execution that may result from vulnerabilities in Kodak Image Viewer, Microsoft Outlook Express, Internet Explorer and Microsoft Word.
McAfee IntruShield provides coverage for Kodak Image Viewer, Microsoft Outlook Express and Windows Mail, Internet Explorer, RPC, Windows SharePoint Services and Office SharePoint Server 2007 and Microsoft Word vulnerabilities.

The McAfee System Compliance Profiler is being updated for the newly disclosed vulnerabilities to assess compliance levels of the security patches announced.

The McAfee Foundstone and McAfee Network Access Control (previously known as McAfee Policy Enforcer) checks are being created to detect the vulnerabilities announced.