Home / Research Reports / Endpoint Security / Anti-Malware

Endpoint Protection Against Internet Explorer Vulnerability (Advisory #961051) Q4 2008

Advisory - IT Admins: Apply the Microsoft Internet Explorer Patch ASAP

Microsoft published Microsoft Security Advisory (961051) on Dec. 10, 2008, detailing a vulnerability in Internet Explorer that could allow arbitrary Remote Code Execution. This vulnerability in IE5, IE6, IE7 and IE8 Beta allows an attacker to take complete control of an affected system.

During the week of Dec 15-18, NSS Labs conducted a series of tests of popular endpoint protection products to evaluate their ability to protect clients from exploits targeting the IE vulnerability; specifically during the interim time until the patch can be tested and deployed in enterprise environments.

Tested products include:

  • AVG Internet Security Network Edition v8.0
  • Kaspersky Total Space Security v6.0
  • McAfee Total Protection for Endpoint
  • Sophos Endpoint Security and Control v8.0
  • Symantec Endpoint Protection 11.0.2 MR2
  • Trend Micro Officescan 8.0 SP1 R3

Free Report