# MA-511.082015: MyCERT Advisory - MyCERT Vulnerability and Threat Summary - May 2015

**Date:** 26 Aug 2015  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-511.082015  
**Advisory ID:** MA-511.082015

---

**1.0 Introduction**
The MyCERT Vulnerability and Threat Summary contains list of Alert and Advisory that had been produced in May. It provides a summary of new vulnerabilities and current threats that have been observed by MyCERT in each month  which had been produced as MyCERT Alert and Advisory.
The MyCERT Vulnerability and Threat Summary will be very beneficial for System Administrators and Incident Response Teams as a reference on security 
**2.0List of Advisory and Alert**
MyCERT has released six advisories for the month of May 2015.  This advisories are to address multiple vulnerabilities that affecting a few products and softwares.  Users and administrators are encouraged to review and apply the necessary updates.
> 2.1 [MA-480.052015: MyCERT Advisory – Google Releases Security Update for Chrome](https://www.mycert.org.my/portal/advisory?id=MA-480.052015)
> Google has released Chrome 43.0.2357.65 for Windows, Mac, and Linux to address multiple vulnerabilities. Some of these vulnerabilities could potentially allow an attacker to take control of the affected system. Google Chrome users are advised to update to the latest version. 
>
> 2.2 [MA-479.052015: MyCERT Advisory - Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird](https://www.mycert.org.my/portal/advisory?id=MA-479.052015)
> The Mozilla Foundation has released security updates to address vulnerabilities in Firefox, Firefox ESR, and Thunderbird. Mozilla encourages users and administrators to review Mozilla's Security Updates and apply the necessary updates.
>
> 2.3 [MA-478.052015: MyCERT Advisory - Adobe Releases Security Updates for Flash Player, Reader, and Acrobat](https://www.mycert.org.my/portal/advisory?id=MA-478.052015)
> Adobe has released security updates to address multiple vulnerabilities in Flash Player, Reader, and Acrobat. Users and administrators are encouraged to review Adobe Security Bulletins APSB15-09 and APSB15-10 and apply the necessary updates. 
>
> 2.4 [MA-477.052015: MyCERT Advisory - Microsoft Security Bulletin Summary for May 2015](https://www.mycert.org.my/portal/advisory?id=MA-477.052015)
> Microsoft has released thirteen updates to address vulnerabilities in Microsoft Windows, Microsoft Internet Explorer, Microsoft SharePoint Server, Microsoft .NET, and Microsoft Office. Some of these vulnerabilities could allow elevation of privilege, denial of service, remote code execution, information disclosure, or security feature bypass. Users and administrators are encouraged to review Microsoft Security Bulletin Summary MS15-043 - MS15-055 and apply the necessary updates.
>
> 2.5 [MA-476.052015: MyCERT Advisory - Wordpress Security and Maintenance Release](https://www.mycert.org.my/portal/advisory?id=MA-476.052015)
> WordPress 4.2 and prior versions contain critical cross-site scripting vulnerabilities. Exploitation of these vulnerabilities could allow a remote attacker to take control of an affected website. 
>
> 2.6 [MA-475.052015: MyCERT Advisory – Apple Releases Security Update for Safari](https://www.mycert.org.my/portal/advisory?id=MA-475.052015)
> Apple has released security updates for Safari to address multiple vulnerabilities. Users and administrators are recommending reviewing Apple Security Update and patch as soon as possible.
**3.0 Recommendations**
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#46253f2423347f7f7f06253f24233435232533342f323f682b3f) or [[email protected]](/cdn-cgi/l/email-protection#503d2933352224103d29333522247e3f22377e3d29) 
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442 
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter : <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**4.0 References**
- MyCERT Advisories, Alerts and Summaries for the year 2015
<https://www.mycert.org.my/portal/advisories?id=431fab9c-d24c-4a27-ba93-e92edafdefa5&year=2015&ctype=&keyword=>