Sony BMG Faces New Copy Protection Debacle

Sony BMG already reeling from the so called rookit copy protected CD nightmare has a new mess on their hands according to the non-profit Electronic Frontier Foundation.

"Certain audio compact discs distributed by Sony BMG contain a version of the SunnComm MediaMax software, which creates a serious risk of a privilege escalation attack.’ This new security vulnerability — different than the one reported in early November regarding Sony BMG CDs sold with software called XCP — affects all Sony BMG CDs that contain version 5 of SunnComm MediaMax software. According to Sony BMG, about six million CDs have this software," states the EFF web site.

On Tuesday December 6, Sony BMG and SunnComm made available a patch that was designed to resolve this security vulnerability," The EFF continues. "We’re pleased that Sony BMG responded quickly and responsibly when we drew their attention to this serious security problem. However, the day after the patch was released, Professor Ed Felten and Alex Halderman identified a new problem…They recommend for now that if you have a Windows PC, you 1)do not use the MediaMax patch 2) do not use the previously released MediaMax uninstaller, and 3) do not insert a MediaMax-bearing CD into your PC."

The EFF is already suing Sony BMG in California and this newest problem can only add to consumer distrust for CD’s during this crucial holiday buying season.

Click here for more from the EFF on the issue.

For more directly from the researchers who found the new problem click here.