Lack of pre-defined checks for critical vulnerabilities

[Isabelle Graham]

With Conficker making the rounds we're finding it a bit frustrating that there is still no Cisco 
provided check for the MS08-067 patch in Vista. While the majority of our users are still running 
XP, Vista is a significant portion of our user base and we don't have an effective way to making 
sure they are patched. There also seems to be a general lack of checks for critical vulnerability 
patches for common third party programs (Java, Flash, Acrobat, etc.) Has anyone heard if there is a 
timeline for adding any of this or are we just on our own?

----
Isabelle Graham
Information Security
American University