sonic stage/connect/sony

postingalwaysposting

i had an email from them today (dont know if its spam or not) and here is the first paragraph...

A security vulnerability has been associated with the Gracenote CDDB
(CD Database) look up service, utilized in certain Sony® software
applications. This vulnerability affects SonicStage version 3.3,
SonicStage 3.4 and CONNECT Player.

it then has loads of links for you to download 'stuff' ie security patches or the latest version, what do i do

woo

i have had this email too, i ignored it.. but if you want to be sure don't click a link in the email but go to sony.co.uk and you should be able to check out the latest downloads for sonic stage there.

what i found odd was that apple haven't reported this and iTunes uses Gracenot e too.

postingalwaysposting

woo is it ok to ignore it then? i use mine everyday, as i play whats on my mp3 player through my computer using sonicstage on shuffle, i cant live without it now

woo

read into it a bit more, it is a specific sony issue on specific software.

see http://www.gracenote.com/sec062706/SonySecurityNotification.html

it says no one has exploited this issue, yet, but it might still be worth updating.

There is a link on that page to update your software, it only affects:
Sony CONNECT Player
Sony SonicStage Ver.3.3/3.4
Sony SonicStage Mastering Studio Ver.2.1/2.2

There is sonic stage CP out now, so it might be worth upgrading to that.

postingalwaysposting

well i dont know what version i have :rotfl: how can i find out? and whats sonic stage cp?

woo

if you open up sonic stage, it should say on the screen as it loads up or you should be able to do help > about and that will tell you.

Sonic stage cp is sonic stage 4, see http://www.sony.co.uk/view/ShowArticle.action?article=1138634683612&site=odw_en_GB

postingalwaysposting

well i think i have sonic stage 4 lol this is what comes up in about - SonicStage : 4.0.00.05080 i should have said in my op i have only had this mp3 player a few months

woo

ah well then nothing to worry about

postingalwaysposting

thanks woo