# MA-585.032016: MyCERT Advisory - Apple Releases Security Update

**Date:** 10 Mar 2016  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-585.032016  
**Advisory ID:** MA-585.032016

---

####
**1.0 Introduction**
Apple has released a security update for Windows 7 and later to address a vulnerability in Apple Software Update. Exploitation of this vulnerability may allow a remote attacker to take control of an affected system.
Users and administrators are encouraged to review the Apple security website for Software Update 2.2 and apply the necessary update.
**2.0 Impact**
Exploitation of these vulnerabilities could potentially allow a remote attacker to control the contents of the updates window. The contents of the updates window were retrieved from the network using an unprotected HTTP connection.
**3.0 Affected Products**
Apple Software Update, which is running on:
- prior version to Windows 7
**4.0 Recommendations**
MyCERT highly recommends users of these applications to upgrade to the latest version of the affected products:
> 4.1 Apple Software Update 2.2
> Please refer:
> <https://support.apple.com/en-my/HT206091>
>
> 4.2 Security updates for all Apple products
> <https://support.apple.com/en-my/HT201222>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#fc9f859e998ec5c5c5bc9f859e998e8f999f898e958885d29185) or [[email protected]](/cdn-cgi/l/email-protection#ff92869c9a8d8bbf92869c9a8d8bd1908d98d19286) 
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442 
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter : <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
- Apple Releases Security Updates:<https://www.us-cert.gov/ncas/current-activity/2016/03/09/Apple-Releases-Security-Update>
- Apple Releases Security Updates: <http://foreignaffairs.co.nz/2016/03/10/apple-releases-security-update/>
- Apple Product Security: <https://www.apple.com/support/security/>