Aladdin eSafe the Only Gateway-Based Solution to Fully Protect Organizations Against New WMF Vulnerability
Share:
CHICAGO, Dec. 30 -- Aladdin Knowledge Systems (NASDAQ:ALDN), the worldwide leader in Software Digital Rights Management (DRM) and USB-based authentication solutions, and a leading innovator in enterprise secure content management, today announced that its Aladdin eSafe integrated content security and anti-virus suite stands as the only solution that proactively protects organizations from the recently discovered WMF (Windows Meta File) exploit (MS05-053). Because the primary attack vector for WMF comes from manipulated Web-based images and pop-ups that download spyware and Trojans, conventional content security solutions are unable to address this threat.
The Aladdin Content Security Response Team (CSRT) lists the WMF exploit as a "high" threat, with numerous spyware/adware sites already using several variants of exploited image files to automatically download and install various spyware and Trojan components. Currently, Aladdin eSafe, featuring unique technologies aimed at fighting off zero-day attacks, is the only gateway product capable of providing complete protection against this threat and future variants. The Windows Meta File (WMF extension) vulnerability exploits a function within the WMF library in Windows. This zero-day vulnerability allows specially constructed image files to drop malicious content on to vulnerable systems. Typical types of attack include spyware Web pages containing image files that drop and execute certain Trojans and Spyware components upon visiting the site, as well as infected pop-up windows opening when visiting referral sites or visiting sites containing embedded infected banner ads. Downloaded Trojans, in turn, download other malware, thus increasing their hold on the infected PC. For the latest information on the WMF vulnerability, visit the Aladdin CSRT Web site at http://www.aladdin.com/eSafe.
"With many desktop solutions not inspecting potentially infected images, and with a fast-growing amount of spyware sites already exploiting variants of the WMF vulnerability, the Aladdin CSRT considers this a very serious threat," said Shimon Gruper, vice president of technologies for the Aladdin eSafe Business Unit. "Because it exposes computers to such a large number of dangerous security risks, the WMF vulnerability is the most significant threat we've seen in several months. Computers can be infected with spyware without user interaction simply by visiting an infected Web site or downloading an infected image. Since many of the involved sites appear to promote pornography, drugs and pharmaceuticals, they may even be assisted by spam or even phishing emails that direct traffic to those sites. The WMF vulnerability is a serious threat that only a proactive solution such as Aladdin eSafe is designed to effectively block."
About Aladdin eSafe 5
Aladdin eSafe, recently named a finalist for four 2006 SC Magazine Awards, is an integrated gateway content security solution providing proactive email security and Web browsing security. As an in-line, transparent solution, eSafe offers the industry's highest content security performance, encompassing:
o Layered anti-spyware
o Spam management
o Application filtering
o Proactive anti-virus technologies
Unlike other products which focus on viruses, eSafe protects users and the enterprise from Web-borne content threats including spam, viruses, known and unknown worms, Trojans, Webpage malicious code, spyware, unauthorized P2P, Instant Messaging applications, and more. With eSafe, organizations take control before problems arise, saving valuable time as well as thousands of dollars in costly repairs, and providing content security where it counts most -- at the gateway front line.
For more information on Aladdin eSafe, visit http://www.aladdin.com/eSafe.
About Aladdin
Aladdin Knowledge Systems Ltd. is a global provider of security solutions that reduce software theft, authenticate network users and protect against unwanted Internet and e-mail content, including spam, viruses and spyware. Its security products are organized into two segments: Software Digital Rights Management (DRM) and Enterprise Security. Aladdin's Software DRM products allow software publishers to protect their intellectual property and increase revenues by reducing losses from software theft and piracy. Its Enterprise Security solutions enable organizations to secure their information technology assets by controlling who has access to their networks (authentication) and what content their users can utilize (content security). Visit the Aladdin Web site at www.Aladdin.com.
All rights reserved. eSafe, Aladdin Knowledge Systems and the Aladdin logo are trademarks or registered trademarks of Aladdin Knowledge Systems, Ltd. All other product and brand names mentioned in this document are trademarks or registered trademarks of their respective owners
