Sunncomm/MediaMax software fix released
What a long journey it’s been and there is progress in the Sony DRM story. The main issue in the Sony controversy was the XCP DRM software (Digital Rights Management) which was made by first4internet. However, as the first rootkit was discovered, questions began about the MediaMax software (made by SunnComm) which was the OTHER DRM method that Sony made use of. As the story developed it was found that there were security flaws in the ActiveX control which was necessary to uninstall both of the DRM packages…. anyway..
The SecurityFix is reporting that SunnComm has released this uninstaller for the MediaMax DRM software that shipped with some Sony-BMG discs. Hopefully this uninstaller doesn’t introduce any other problems. I’m sure it will get a good deal of scrutiny.
We’re still waiting on fixes for the XCP software now that started this whole journey. That much said, it’s progress….
–correction 12/7/05–
It looks like this fix does NOT address issues that freedom-to-tinker uncovered with the ActiveX uninstaller. It addresses previously undisclosed vulnerabilities with the SunnComm DRM that ISEC partners discovered while working with the EFF (Electronic Frontier Foundation). Details here (pdf).
–update 1:02 PM EST 12/7/05 —
Please read Sunncomm/Mediamax software fix FLAWED for an update on the situation.
Click for previous Sony news covered here….