# MA-513.082015: MyCERT Advisory - MyCERT Vulnerability and Threat Summary - July 2015

**Date:** 27 Aug 2015  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-513.082015  
**Advisory ID:** MA-513.082015

---

CMS MYCERT Advisories Administration Welcome, Author Advisories 1 ! Advisories Administration Home Advisories Administration Update Advisory Field marked \* are mandatory Advisory TitleMyCERT Vulnerability and Threat Summary - July 2015 Advisory TypeNew Advisory CategoryAdvisory Advisory Content \*1.0 Introduction**
The MyCERT Vulnerability and Threat Summary contains list of Alert and Advisory that had been produced in July. It provides a summary of new vulnerabilities and current threats that have been observed by MyCERT in each month  which had been produced as MyCERT Alert and Advisory.
The MyCERT Vulnerability and Threat Summary will be very beneficial for System Administrators and Incident Response Teams as a reference on security 
**2.0 List of Advisory and Alert**
MyCERT has released 17 advisories/alerts for the month of July 2015.  This advisories/alerts are to address multiple vulnerabilities that affecting a few products and softwares.  Users and administrators are encouraged to review and apply the necessary updates.
> 2.1 [MA-486.072015: MyCERT Advisory – Apple Releases Security Updates for Quicktime, Safari, Mac EFI, OS X Yosemite and IOS](https://www.mycert.org.my/portal/advisory?id=MA-486.072015)
> Apple has released security updates for QuickTime, Safari, Mac Extensible Firmware Interface (EFI), OS X Yosemite, and iOS. Exploitation of some of these vulnerabilities may allow an attacker to obtain elevated privileges or crash applications.
>
> 2.2 [MA-487.072015: MyCERT Advisory - Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird](https://www.mycert.org.my/portal/advisory?id=MA-487.072015)
> The Mozilla Foundation has released security updates to address vulnerabilities in Firefox, Firefox ESR, and Thunderbird. Mozilla encourages users and administrators to review Mozilla's Security Updates and apply the necessary updates.
>
> 2.3 [MA-488.072015: MyCERT Advisory – Adobe Releases Security Updates for Flash Player](https://www.mycert.org.my/portal/advisory?id=MA-488.072015)
> Adobe has released security updates to address multiple vulnerabilities in Flash Player for Windows, Macintosh and Linux.
>
> 2.4 [MA-489.072015: MyCERT Advisory - Security Updates for BIND](https://www.mycert.org.my/portal/advisory?id=MA-489.072015)
> The Internet Systems Consortium (ISC) has released security updates to address vulnerability in BIND. Users and administrators are encouraged to apply the necessary updates.
>
> 2.5 [MA-490.072015: MyCERT Advisory - OpenSSL Patches Multiple Vulnerabilities](https://www.mycert.org.my/portal/advisory?id=MA-490.072015)
> OpenSSL has released updates to address a vulnerability that could impact the proper certificate verification. A remote attacker could ‘issue’ invalid certificates that pass validation by affected versions. This vulnerability will impact any application that verifies certificates including SSL/TLS/DTLS clients and SSL/TLS/DTLS servers using client authentication.
>
> 2.6 [MA-491.072015: MyCERT Advisory - Security Updates for Adobe Flash Player](https://www.mycert.org.my/portal/advisory?id=MA-491.072015)
> Adobe Flash Player contains critical vulnerabilities within the ActionScript 3 opaqueBackground and BitmapData classes. Exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary code on a vulnerable system.
>
> 2.7 [MA-492.072015: MyCERT Advisory - VMware Releases Security Advisory](https://www.mycert.org.my/portal/advisory?id=MA-492.072015)
> VMware has released security updates to address a host privilege escalation vulnerability in VMware Workstation, Player and Horizon View Client for Windows.
>
> 2.8 [MA-493.072015: MyCERT Advisory – Adobe Flash and Microsoft Windows Vulnerabilities](https://www.mycert.org.my/portal/advisory?id=MA-493.072015)
> Adobe has released security updates for Adobe Flash Player for Windows, Macintosh and Linux. Users and administrators are encouraged to review Adobe Security Bulletins APSB15-14 and apply the necessary updates.
>
> 2.9 [MA-494.072015 : MyCERT Advisory - Security Updates for Flash AS3 opaqueBackground and BitmapData Use-After-Free Vulnerabilities](https://www.mycert.org.my/portal/advisory?id=MA-494.072015)
> Adobe Flash Player contains critical vulnerabilities within the ActionScript 3 opaqueBackground and BitmapData classes. Exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary code on a vulnerable system.
>
> 2.10 [MA-495.072015 : MyCERT Advisory - Microsoft Releases July 2015 Security Bulletin](https://www.mycert.org.my/portal/advisory?id=MA-495.072015)
> Microsoft has released fourteen updates to address vulnerabilities in Microsoft Windows. Exploitation of some of these vulnerabilities could allow remote code execution or elevation of privileges. MyCERT encourages users and administrators to review Microsoft Security Bulletins MS15-058 and MS15-065 through MS15-077 and apply the necessary updates.
>
> 2.11 [MA-496.072015 : MyCERT Special Alert - Festive Season and Holiday Alert](https://www.mycert.org.my/portal/advisory?id=MA-496.072015)
> As the festive season holiday approaches and many of us will be leaving for holiday break, we would like to alert System Administrators and Internet users to ensure sufficient measures had been implemented to secure their systems and networks before leaving for the holidays.
>
> 2.12 [MA-497.072015 : MyCERT Advisory - Adobe Releases Security Updates for Shockwave Player](https://www.mycert.org.my/portal/advisory?id=MA-497.072015)
> Adobe has released a security update for Adobe Shockwave Player for Windows and Macintosh. Users and administrators are encouraged to review Adobe Security Bulletin APSB15-17 and apply the necessary update.
>
> 2.13 [MA-498.072015: MyCERT Alert - Microsoft Releases July 2015 Security Bulletin](https://www.mycert.org.my/portal/advisory?id=MA-498.072015)
> Microsoft has released a security update to address a critical vulnerability in Windows. Exploitation of this vulnerability may allow a remote attacker to take control of an affected system. The security update addresses the vulnerability by correcting how the Windows Adobe Type Manager Library handles OpenType fonts.
>
> 2.14 [MA-499.072015: MyCERT Advisory – Google Releases Security Update for Chrome](https://www.mycert.org.my/portal/advisory?id=MA-499.072015)
> Google has released Chrome version 44.0.2403.89 for Windows, Mac, and Linux to address multiple vulnerabilities. Exploitation of one of these vulnerabilities may allow an attacker to take control of an affected system. Users and administrators are advised to apply the necessary update.
>
> 2.15 [MA-500.072015: MyCERT Advisory - WordPress Releases Security Update](https://www.mycert.org.my/portal/advisory?id=MA-500.072015)
> WordPress 4.2.2 and prior versions contain critical cross-site scripting vulnerabilities. Users and administrators are encouraged to review the WordPress Security and Maintenance Release and upgrade to WordPress 4.2.3.
>
> 2.16 [MA-501.072015: MyCERT Alert – ‘Stagefright’ Android Vulnerability](https://www.mycert.org.my/portal/advisory?id=MA-501.072015)
> Stagefright is the media playback service for Android, introduced in Android 2.2 (Froyo). Stagefright contains multiple vulnerabilities, including several integer overflows, which may allow a remote attacker to execute code on the device. Android devices running Android versions 2.2 through 5.1.1\_r4 contain multiple vulnerabilities in the Stagefright media playback engine. Exploitation of these vulnerabilities may allow an attacker to access multimedia files or potentially take control of a vulnerable device.
>
> 2.17 [MA-502.072015: MyCERT Advisory - Internet Systems Consortium (ISC) Releases Security Updates for BIND](https://www.mycert.org.my/portal/advisory?id=MA-502.072015)
> The Internet Systems Consortium (ISC) has released security updates to address vulnerability in BIND. Users and administrators are encouraged to review ISC Knowledge Base Article AA-01272 and apply the necessary updates.
**3.0 Recommendations**
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#d0b3a9b2b5a2e9e9e990b3a9b2b5a2a3b5b3a5a2b9a4a9febda9) or [[email protected]](/cdn-cgi/l/email-protection#305d4953554244705d49535542441e5f42571e5d49) 
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442 
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter : <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**4.0 References**
- MyCERT Advisories, Alerts and Summaries for the year 2015
<https://www.mycert.org.my/portal/advisories?id=431fab9c-d24c-4a27-ba93-e92edafdefa5&year=2015&ctype=&keyword=>