SunnComm Patches Flaw in Its Sony Software
SunnComm Technologies, a company whose software was bundled with several million Sony BMG music CDs in a bid to keep them from being duplicated, has issued a software update to fix a dangerous security hole in roughly 6 million CDs.
Last month, security researchers discovered that anti-piracy software installed by at least 52 Sony BMG music CD titles contained security flaws that could let attackers infiltrate computers running the software, which was installed automatically when users inserted the CDs into their Windows PCs.
Sony later issued a software patch to fix the problem, but it soon became apparent that the patch itself visited even more serious security problems on affected machines.
Researchers at ISEC Partners, working with the Electronic Frontier Foundation (which has since filed a class-action lawsuit against Sony), found that the SunnComm software also contained a worrying security hole.
The past evening, SunnComm issued a software update engineered to help users rid themselves of the SunnComm software altogether. The uninstall tool can be downloaded from this link. One can only hope that SunnComm and Sony haven't managed to introduce new problems. EFF has posted more information on this whole problem here.
It's worth noting that neither Sony nor the British company whose flawed software sparked this whole debacle -- First4Internet.com -- have issued an update that lets customers undo the damage wrought by the tool the companies issued to remove the flawed software.
It's also worth noting that it's not yet clear whether this latest patch addresses a flaw raised by researchers at Princeton University, who found a serious security hole in a previous uninstall tool issued by SunnComm.
Update, 8:30 a.m. ET:A reader correctly noted that this flaw patched this week by SunnComm addresses an issue discovered by ISEC Partners, not by the Princeton researchers. The above text has been corrected.
Posted by: MusicFan | December 7, 2005 1:52 AM | Report abuse
Posted by: Bk | December 7, 2005 8:56 AM | Report abuse
Posted by: Daedalus | December 7, 2005 10:44 AM | Report abuse
Posted by: kosmo vinyl | December 7, 2005 3:10 PM | Report abuse
Posted by: kosmo vinyl | December 7, 2005 5:08 PM | Report abuse
Posted by: Annica | December 7, 2005 11:47 PM | Report abuse
Posted by: Ken D | December 8, 2005 1:02 PM | Report abuse
The comments to this entry are closed.