# MA-510.082015: MyCERT Advisory - MyCERT Vulnerability and Threat Summary - April 2015

**Date:** 26 Aug 2015  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-510.082015  
**Advisory ID:** MA-510.082015

---

**1.0 Introduction**
The MyCERT Vulnerability and Threat Summary contains list of Alert and Advisory that had been produced in April. It provides a summary of new vulnerabilities and current threats that have been observed by MyCERT in each month  which had been produced as MyCERT Alert and Advisory.
The MyCERT Vulnerability and Threat Summary will be very beneficial for System Administrators and Incident Response Teams as a reference on security 
**2.0 List of Advisory and Alert**
MyCERT has released four advisories and four alerts for the month of April 2015.  This advisories are to address multiple vulnerabilities that affecting a few products and softwares.  Users and administrators are encouraged to review and apply the necessary updates.
> 2.1[MA-474.042015: MyCERT Advisory - Wordpress Releases Security Update](https://www.mycert.org.my/portal/advisory?id=MA-474.042015)
> WordPress 4.2 and prior versions contain critical cross-site scripting vulnerabilities. Exploitation of these vulnerabilities could allow a remote attacker to take control of an affected website. Users and administrators are encouraged to upgrade to Wordpress 4.2.1. 
>
> 2.2[MA-473.042015 : MyCERT Alert - Circulation of Emails Attached with Malicious Document](https://www.mycert.org.my/portal/advisory?id=MA-473.042015)
> MyCERT has been receiving several reports of circulation of a malicious email with a suspicious attachment. The email comes with various contents with includes application for jobs and internships. The email also contains a malicious attachment which is a document file purportedly containing resume of the applicant. 
>
> 2.3 [MA-472.042015: MyCERT Advisory - Mozilla Releases Security Updates for Firefox](https://www.mycert.org.my/portal/advisory?id=MA-472.042015)
> The Mozilla Foundation has released Firefox 37.0.2 to address a vulnerability that may allow a remote attacker to take control of an affected system. 
>
> 2.4 [MA-471.042015: MyCERT Alert - Microsoft Security Bulletin Summary for April 2015](https://www.mycert.org.my/portal/advisory?id=MA-471.042015)
> Microsoft has released eleven updates to address vulnerabilities in Microsoft Windows. Some of these vulnerabilities could allow elevation of privilege, denial of service, remote code execution, information disclosure, or security feature bypass. 
>
> 2.5 [MA-470.042015: MyCERT Alert – Simda Botnet](https://www.mycert.org.my/portal/advisory?id=MA-470.042015)
> The Simda botnet is a network of computers infected with self-propagating malware that has compromised more than 770,000 computers worldwide. Since 2009, cyber criminals have been targeting computers with unpatched software and compromising them with Simda malware. This malware may re-route a user’s Internet traffic to websites under criminal control or can be used to install additional malware. The malicious actors control the network of compromised systems (botnet) through backdoors, giving them remote access to carry out additional attacks or to “sell” control of the botnet to other criminals. The backdoors also morph their presence every few hours, allowing low anti-virus detection rates and the means for stealthy operation. 
>
> 2.6 [MA-469.042015: MyCERT Alert – DNS Zone Transfer AXFR Requests May Leak Domain Information](https://www.mycert.org.my/portal/advisory?id=MA-469.042015)
> AXFR is a protocol for “zone transfers” for replication of DNS data across multiple DNS servers [1]. Unlike normal DNS queries that require the user to know some DNS information ahead of time, AXFR queries reveal subdomain names [2]. Because a zone transfer is a single query, it could be used by an adversary to efficiently obtain DNS data. A well-known problem with DNS is that zone transfer requests can disclose domain information; for example, see CVE-1999-0532 and a 2002 CERT/CC white paper. However, the issue has regained attention due to recent Internet scans still showing a large number of misconfigured DNS servers. Open-source, tested scripts are now available to scan for the possible exposure, increasing the likelihood of exploitation.
>
> 2.7 [MA-468.042015: MyCERT Advisory - Mozilla Releases Security Update for Firefox](https://www.mycert.org.my/portal/advisory?id=MA-468.042015)
> The Mozilla Foundation has released Firefox 37.0.1 to address two vulnerabilities, one of which may allow a remote attacker to conduct man-in-the-middle attacks. Mozilla encourages users and administrators to review Mozilla's Security Updates and apply the necessary updates. 
>
> 2.8 [MA-465.042015: MyCERT Advisory - Mozilla Releases Security Updates for Firefox, Firefox ESR and Thunderbird](https://www.mycert.org.my/portal/advisory?id=MA-465.042015)
> Mozilla Foundation has released security updates to address multiple vulnerabilities in Firefox, Firefox ESR and Thunderbird. Mozilla encourages users and administrators to review Mozilla's Security Updates and apply the necessary updates.
**3.0 Recommendations**
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#11726873746328282851726873746362747264637865683f7c68) or [[email protected]](/cdn-cgi/l/email-protection#f4998d97918680b4998d97918680da9b8693da998d) 
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442 
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter : <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**4.0 Reference**
- MyCERT Advisories, Alerts and Summaries for the year 2015
<https://www.mycert.org.my/portal/advisories?id=431fab9c-d24c-4a27-ba93-e92edafdefa5&year=2015&ctype=&keyword=>