# MA-486.072015: MyCERT Advisory - Apple Releases Security Updates for Quicktime, Safari, Mac EFI, OS X Yosemite and IOS

**Date:** 02 Jul 2015  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-486.072015  
**Advisory ID:** MA-486.072015

---

#### **1.0 Introduction**
Apple has released security updates for QuickTime, Safari, Mac Extensible Firmware Interface (EFI), OS X Yosemite, and iOS. Exploitation of some of these vulnerabilities may allow an attacker to obtain elevated privileges or crash applications.
**2.0 Impact**
Exploitation of these vulnerabilities could potentially allow a remote attacker to take control of the affected system.
**3.0 Affected Product**
- Apple OS X Yosemite v10.10.2QuickTime 7.7.7 for Windows 7 and Windows Vista
- Safari 8.0.7, Safari 7.1.7, and Safari 6.2.7 for OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite v10.10.3
- Mac EFI for OS X Mountain Lion v10.8.5 and OS X Mavericks v10.9.5
- OS X Yosemite 10.10.4 for OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite v10.10 to v10.10.3
- iOS 8.4 for iPhone 4s and later, iPod touch 5th generation and later, and iPad 2 and later
**4.0 Recommendation**
We encourage users to review the [Apple Product Security](https://www.apple.com/support/security/) for information on how to enable automatic updates. Below are the direct link to the update instructions page:
- [Update OS X and App Store apps on your Mac](https://support.apple.com/en-my/HT201541)
- [Update your iPhone, iPad, or iPod touch iOS software](https://support.apple.com/en-my/HT204204)
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection#9efde7fcfbeca7a7a7defde7fcfbecedfbfdebecf7eae7b0f3e7) or [[email protected]](/cdn-cgi/l/email-protection#98f5e1fbfdeaecd8f5e1fbfdeaecb6f7eaffb6f5e1) 
Phone: 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442 
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter: <http://www.twitter.com/mycert>
Cyber999 Mobile Apps: [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0References**
- US-CERT: Apple Releases Security Updates for QuickTime, Safari, Mac EFI, OS X Yosemite and iOS, <https://www.us-cert.gov/ncas/current-activity/2015/06/30/Apple-Releases-Security-Updates-QuickTime-Safari-Mac-EFI-OS-X>
- <https://support.apple.com/en-my/HT201222>
- <https://www.apple.com/support/security/>