McAfee for Enterprise

Global Threat Condition

Microsoft has released patches for two issues affecting Microsoft DNS Server running on Windows 2000/2003 Server and Microsoft Internet Explorer 7 running on Windows XP/2003 Server. The latter vulnerability was disclosed on September 1, 2007. On October 26, 2007, McAfee started to observe increased exploitation of this unpatched Internet Explorer 7 URI Handler vulnerability in the wild. At this time, several noteworthy Microsoft vulnerabilities remain unpatched. These include a Microsoft Windows HLP file processing vulnerability, a Microsoft Windows Internet Connection Sharing vulnerability, a Microsoft Windows Explorer Vulnerability, three Visual Studio malformed file vulnerabilities, and a PowerPoint 2003 malformed file vulnerability.

Critical

Systems worldwide are targeted by a worm.

New malware that potentially can cause damage has been reported and has spread globally.

Severe

An unpatched or recently patched vulnerability can be exploited by a worm, and systems worldwide are at risk to be targeted by a particular worm. No worm activity has been identified.

A high incidence of new malware that potentially can cause damage has been reported.

Elevated

An unpatched or recently patched vulnerability is present on many systems worldwide but requires user interaction to be exploited.

An existing vulnerability becomes more serious because new exploit code has been published.

There is new malware activity, but it is not widespread.

Low

There is no direct threat to systems that have been patched.

No new significant malware activity has been reported.