# MA-524.102015: MyCERT Advisory - MyCERT Vulnerability and Threat Summary - August 2015

**Date:** 08 Oct 2015  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-524.102015  
**Advisory ID:** MA-524.102015

---

**1.0 Introduction**
The MyCERT Vulnerability and Threat Summary contains list of Alert and Advisory that had been produced in August. It provides a summary of new vulnerabilities and current threats that have been observed by MyCERT in each month, which had been produced as MyCERT Alert and Advisory.
The MyCERT Vulnerability and Threat Summary will be very beneficial for System Administrators and Incident Response Teams as a reference on security 
**2.0 List of Advisory and Alert**
MyCERT has released 14 advisories or alerts for the month of August 2015.  This advisories or alerts are to address multiple vulnerabilities that affecting a few products and software’s.  Users and administrators are encouraged to review and apply the necessary updates.
> **2.1** [MA-503.072015: MyCERT Advisory - WordPress Releases Security Update](https://www.mycert.org.my/portal/advisory?id=MA-503.072015)
>
> WordPress 4.2.3 and prior versions contain critical cross-site scripting and potential SQL injection vulnerabilities. Users and administrators are encouraged to review the WordPress Security and Maintenance Release and upgrade to WordPress 4.2.4.
>
> **2.2** [MA-504.082015: MyCERT Advisory - Mozilla Releases Security Updates for Firefox and Firefox ESR](https://www.mycert.org.my/portal/advisory?id=MA-504.082015)
>
> The Mozilla Foundation has released security updates to address a critical vulnerability in the built-in PDF Viewer for Firefox and Firefox ESR. Exploitation of the vulnerability may allow an attacker to read and steal sensitive local files on the victim's computer. This vulnerability is fixed in Firefox 39.0.3 and Firefox ESR 38.1.1.
>
> **2.3** [MyCERT 2nd Quarter 2015 Summary Report](https://www.mycert.org.my/portal/advisory?id=SR-053.Q22015)
>
> The MyCERT Quarterly Summary Report provides an overview of activities carried out by the Malaysia Computer Emergency Response Team (hereinafter referred to as MyCERT), a department within CyberSecurity Malaysia.
>
> **2.4** [MA-505.082015: MyCERT Special Alert – Best Practices to Secure Systems Against Security Incidents and Threats](https://www.mycert.org.my/portal/advisory?id=MA-505.082015)
>
> MyCERT had been receiving several incidents that involve compromise of systems that belong to various sectors within our constituency. As a preventive measure, MyCERT release this Alert to advise System Administrators to constantly take necessary steps to secure their systems against unwanted incidents as well from other security threats.
>
> **2.5** [MA-507.082015: MyCERT Advisory – Apple Releases Security Updates for OS X Server, iOS, Safari and Yosemite](https://www.mycert.org.my/portal/advisory?id=MA-507.082015)
>
> Apple has released security updates for OS X Server, iOS, Safari, and Yosemite to address multiple vulnerabilities. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.
>
> **2.6** [MA-506.082015: MyCERT Advisory – Lenovo Service Engine (LSE) BIOS Vulnerability](https://www.mycert.org.my/portal/advisory?id=MA-506.082015)
>
> Certain Lenovo personal computers contain a vulnerability in LSE (a Lenovo BIOS feature). Users and administrators are encouraged to review the Lenovo Security Advisories for notebooks and desktops and apply the necessary updates and mitigations**.**
>
> **2.7** [MA-509.082015: MyCERT Alert - Microsoft Releases Critical Security Update for Internet Explorer](https://www.mycert.org.my/portal/advisory?id=MA-509.082015)
>
> Microsoft has released a critical security update to address a vulnerability in Internet Explorer. Exploitation of this vulnerability could allow a remote attacker to take control of an affected system if the user views a specially crafted webpage.
>
> **2.8** [MA-508.082015: MyCERT Advisory - Adobe Releases Security Update for LiveCycle Data Services](https://www.mycert.org.my/portal/advisory?id=MA-508.082015)
>
> Adobe has released a security update to address vulnerability in LiveCycle Data Services(LCDS) versions 4.7, 4.6.2, 4.5, and 3.0.x. Users and administrators are encouraged to review Adobe Security Bulletin APSB15-20 and apply the necessary updates.
>
> **2.9** [MA-510.082015: MyCERT Vulnerability and Threat Summary - April 2015](https://www.mycert.org.my/portal/advisory?id=MA-510.082015)
>
> The MyCERT Vulnerability and Threat Summary contains list of Alert and Advisory that had been produced in April.
>
> **2.10** [MA-511.082015: MyCERT Vulnerability and Threat Summary - May 2015](https://www.mycert.org.my/portal/advisory?id=MA-511.082015)
>
> The MyCERT Vulnerability and Threat Summary contains list of Alert and Advisory that had been produced in May.
>
>
>
> **2.11** [MA-512.082015: MyCERT Vulnerability and Threat Summary - June 2015](https://www.mycert.org.my/portal/advisory?id=MA-512.082015)
>
> The MyCERT Vulnerability and Threat Summary contains list of Alert and Advisory that had been produced in June.
>
> **2.12** [MA-513.082015: MyCERT Vulnerability and Threat Summary - July 2015](https://www.mycert.org.my/portal/advisory?id=MA-513.082015)
>
> The MyCERT Vulnerability and Threat Summary contains list of Alert and Advisory that had been produced in July.
>
> **2.13** [MA-514.082015 : MyCERT Special Alert - Recent Attacks to .MY Domains](https://www.mycert.org.my/portal/advisory?id=MA-514.082015)
>
> MyCERT had been receiving several incidents over the weekend that involve Web Defacements and Distributed Denial of Service (DDOS) attacks towards several .MY domains that belong to various sector within our constituency.
>
> **2.14** [MA-515.082015: MyCERT Advisory - Adobe Releases Security Update for ColdFusion](https://www.mycert.org.my/portal/advisory?id=MA-515.082015)
>
> Adobe has released a security hotfix for ColdFusion version 11 and 10 to address vulnerability. Users and administrators are encouraged to review the Adobe Security Bulletin APSB15-21 and apply the necessary update.
**3.0 Recommendations**
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#99fae0fbfceba0a0a0d9fae0fbfcebeafcfaecebf0ede0b7f4e0) or [[email protected]](/cdn-cgi/l/email-protection#600d1903051214200d19030512144e0f12074e0d19) 
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442 
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter : <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**4.0 References**
- MyCERT Advisories, Alerts and Summaries for the year 2015
<https://www.mycert.org.my/portal/advisories?id=431fab9c-d24c-4a27-ba93-e92edafdefa5&year=2015&ctype=&keyword=>