# MA-547.122015: MyCERT Advisory - Apple Releases Security Update for iTunes

**Date:** 15 Dec 2015  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-547.122015  
**Advisory ID:** MA-547.122015

---

#### **1.0 Introduction**
Apple has released a security update for Apple iTunes to address multiple vulnerabilities. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review information on iTunes 12.3.2 and apply the necessary update.
**2.0 Impact**
Exploitation of these vulnerabilities could potentially allow a remote attacker to take control of the affected system. Visiting a maliciously crafted website may lead to arbitrary code execution and may reveal a user's browsing history.
**3.0 Affected Products**
Updates iTunes 12.3.2. is available for Windows 7 and later.
**4.0 Recommendations**
MyCERT highly recommended users of these applications to upgrade to the latest version of the affected products:
4.1 Security content of iTunes 12.3.2
Please refer:
<https://support.apple.com/en-my/HT205636>
4.2 Security updates for all Apple products
<https://support.apple.com/en-my/HT201222>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#8eedf7ecebfcb7b7b7ceedf7ecebfcfdebedfbfce7faf7a0e3f7) or [[email protected]](/cdn-cgi/l/email-protection#24495d4741565064495d474156500a4b56430a495d)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : <https://www.mycert.org.my>
Twitter : <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0  References**
• Apple Releases Security Update for iTunes: <https://www.us-cert.gov/ncas/current-activity/2015/12/11/Apple-Releases-Security-Update-iTunes>
• Apple Releases Security Update for iTunes: <http://onespiffy.com/2015/12/12/apple-releases-security-update-for-itunes/>
• ESB-2015.3105 - [Win] iTunes: Multiple vulnerabilities: <https://www.auscert.org.au/render.html?it=28962>