Important Notice to Personal Audio Product Owners with SonicStage 3.3 / 3.4, and CONNECT Player
Recently, security vulnerability has been found within a limited number of Sony’s Software applications using the module supplied by Gracenote®. To date neither Sony nor Gracenote has received reports of any customers being affected by this issue. However, we take all security issues very seriously and are therefore providing information about this Gracenote® update to address the issue.
What is the issue?
Security vulnerability (also known as a “buffer overflow”) has been found that exists in certain versions of an ActiveX® control for the CD Information Retrieval Service provided by Gracenote that is used in certain Sony’s software applications. This "buffer overflow" vulnerability could allow an attacker to load malicious code onto a user's system and then execute the code.
This issue only affects the Sony software applications listed below. Other Sony software that utilizes Gracenote's CD Database lookup features do not contain this security issue.
Affected Sony Products
Personal audio products using the following software:
- CONNECT Player
- SonicStage® Version 3.3/3.4
Available Download:
Filename: GracenoteUpdateForSony.exe
Download size: 2.89 MB
Updated on: 2006/06/28
Gracenote is providing the upgrade software on their website. For more detailed information, please click here.
Warranty Information
For information on Sony warranties
Contact support
Contact your Sony Support team
Support by Sony (Mobile App)
Never miss an update again! Find information and receive instant notifications about your product.
