Windows users: beware SonyBMG music CDs

Filed under Technology Announcements
Posted by Technology, November 28, 2005
View all posts for November 2005

As you may have read in the news, there is a potential security breach that affects Windows computers caused by using certain SonyBMG music CDs. Technology at Simmons College wants you to be aware of this issue and to make sure your computer is not impacted.

Problem

SonyBMG announced that about 20 of their released music CDs contain software that loads on a computer when the CDs is played. Users actually grant permission for SonyBMG to do this when they agree to the "End User License Agreement" that displays.

Since SonyBMG released this information, numerous exploits have been discovered that take advantage of the installed software and put your computer at risk.

SonyBMG has released an uninstall application, but Technology suggests against using it, because we've learned that it presents further security inadequacies.

Recommended Solution

Instead, Technology recommends using the uninstaller from Sophos located at http://www.sophos.com/support/disinfection/rkprf.html

And remember: you should download and install your free copy of Sophos Anti-Virus from http://my.simmons.edu/antivirus

Further Information

General information about the SonyBMG issue

• http://news.bbc.co.uk/1/hi/technology/4441928.stm
• http://www.boingboing.net/2005/11/17/sony_rootkit_roundup.html
• http://www.sophos.com/pressoffice/news/articles/2005/11/stinxe.html

Sony response

• http://cp.sonybmg.com/xcp/

Affected CD list

• http://www.eff.org/deeplinks/archives/004144.php

Screen shot of CD Case *https://www.it-isac.org/postings/cyber/alertdetail.php?id=3257

Sophos Uninstaller

• http://www.sophos.com/support/disinfection/rkprf.html

Issues with the Sony uninstaller

• http://www.frsirt.com/english/advisories/2005/2454
• http://www.freedom-to-tinker.com/

« previous post | next post »