Bit9 Identifies the Top 15 Applications with Critical Security Vulnerabilities; List Reveals that Malicious Software is Not the Biggest Threat to Enterprise IT; Even Common Applications Pose a Risk.

CAMBRIDGE, Mass. -- Bit9, Inc., whose award-winning technology solves the problem of unwanted software on the desktop, today announced that it has compiled a list of the top 15 applications with known vulnerabilities. Often running outside of IT's knowledge or control, these popular applications run undetected by enterprise IT organizations and are difficult to detect and remove. The list was designed to help IT departments regain control over their desktop environments.

Each application on the list has the following characteristics:

--is well-known in the consumer space and frequently downloaded by individuals;

--is not classified as malicious software by enterprise IT organizations;

--contains at least one critical vulnerability registered in the U.S. National Institute of Standards and Technology's (NIST) official vulnerability database;

--has a severity rating of between 7.0 - 10.0 (high) on the CVSS scoring system;

--relies on the end user, rather than a central administrator, to manually patch or upgrade the software to eliminate the vulnerability, if such a patch exists.

"These popular software applications are frequently downloaded to corporate desktops and can present serious risks for enterprise computing environments," said Dr. Todd Brennan, co-founder and CTO at Bit9. "Understanding what software is actually running in your organization across your entire desktop environment is the first step in regaining application control and protecting your corporate infrastructure."

Five of the top 15 applications with known vulnerabilities include:

1. Mozilla Firefox 1.0.7

2. Apple iTunes 6.02 & Quicktime 7.0.3

3. Skype Internet phone 1.4

4. Adobe Acrobat Reader 7.02, 6.03

5. Sun Java Run-Time Environment 5.0 Update 3, JRE 1.4.2_08

To obtain a copy of the research brief entitled "15 Popular Applications with Critical Vulnerabilities," please visit http://www.bit9.com/15apps.html. Readers will learn how to gain visibility and control of enterprise desktops and laptops to streamline IT, enforce policy compliance, and eliminate unwanted software.

About Bit9, Inc.

Bit9 is the first company to solve the problem of unwanted software on the desktop. As the only solution to detect, identify and stop spyware, malware, and non-business applications on desktops, laptops, and servers, Bit9 gives IT professionals unprecedented, network-wide visibility and control in real time. Bit9 provides the earliest and best possible protection against known and unknown intrusions, including Zero-day attacks. Founded in 2002 and headquartered in Cambridge, Massachusetts, Bit9 is a privately held company. For more information, visit www.bit9.com.

Bit9, Inc., Automatic Graylists, Find File, FileAdvisor, Parity, and ParityCenter are trademarks or registered trademarks of Bit9, Inc. All other names and trademarks are the property of their respective owners.