News 

The technology in question is produced by SunComm, and the discovery of the flaw is the result of a security audit requested by digital rights body the Electronic Frontier Foundation and carried out by iSEC Partners.

The vulnerability in SunComm's MediaMax Version 5 content protection software centres on a file folder installed by the software on users' systems that could be commandeered by attackers and exploited to gain control over the target system.

SonyBMG has ensured that the review of the system and subsequent patch were carried out with all due diligence in the light of the furore over the use of DRM technology that

ADVERTISEMENT

seriously compromised the security of systems it installed on.

As well as granting the EFF's request for the audit, SonyBMG also conceded to having an independent third-party software security firm, NGS Software, inspect the subsequent patch and the state of the MediaMax technology.

'We're grateful to EFF and iSEC for bringing this to our attention,' said Thomas Hesse, president, Global Digital Business, SonyBMG. 'We believe that the availability of the update coupled with our campaign to notify customers will appropriately address the CDs with MediaMax Version 5 in the market.'

This, from the man who, just weeks ago commented on the SonyBMG DRM problems thus: 'Most people don't even know what a rootkit is, so why should they care about it?'

EFF staff attorney Kurt Opsahl commenteed: 'We're pleased that SONY BMG responded quickly and responsibly when we drew their attention to this security problem. Consumers should take immediate steps to protect their computers.'

The patches and more information are available from the SunnComm and Sony website.