SonicStage CP® (SonicStage® Ver.4.0/4.1/4.2/4.3) Security Update Program
About this download
5th December, 2007
Sony today announced the release of a security update program to address potential security vulnerability resulting from a buffer overflow in some versions of SonicStageCP® music management software, announced by Sony on November 7th, 2007. SonicStage® users are requested to download the security update program in accordance with the following procedures.
Version of SonicStage® subject to security update
- SonicStage® CP (SonicStage® Versions 4.0/4.1/4.2/4.3)
*Upgraded SonicStage® versions are also subject to this security update.
Description of update
This security update program fixes a potential buffer overflow when importing certain malicious play list (m3u) files that could cause the above listed versions of SonicStage® to crash and execute an arbitrary code.
CVE-ID*: CVE-2007-5709
Sony gives credit to Secunia for discovering and reporting this issue.
*CVE (Common Vulnerabilities and Exposures) is a vulnerabilities issue list identification number.
Before Downloading the Security Update Program
How to Check Version Eligibility
- Start the SonicStage program.
- At the main program screen, click the Help option on the menu, and then click About SonicStage.
- At the About SonicStage window, check to see if the version number begins with 4.0, 4.1, 4.2, or 4.3. Only SonicStage versions 4.0/4.1/4.2/4.3 are subjected to the security update.
Important Notes
- This update program is provided to users under the conditions of customer’s SonicStage® Software Legal Agreement.
- To ensure that no other program interferes with the installation, save all work and close all other programs. The Taskbar should be clear of applications before proceeding.
Available Downloads:
SonicStage CP Security Update Program
File name: SonicStageSecurityUpdateProgram-1.0.00.11020.exe
File size: 3.11 MB
File Info
File Name
- SonicStage CP® (SonicStage® Ver.4.0/4.1/4.2/4.3) Security Update Program
File Version
- 1.0.00.11020
File Size
- 3.11MB
Release Date
- 2007-12-05
System Requirements
- Windows XP
- Windows Vista
Download
For Windows Vista® and Windows XP® Users
When downloading the security update with Windows Vista® or Windows XP®, execute update after logging on with user name that belongs to computer manager or manager.
Windows Vista® may display dialog boxes such as "Windows® needs your permission to continue" which controls the user account.
Check the content and continue operations following the displayed announcement.
For Windows 2000® Users
When downloading the security update with Windows 2000 Professional®, use the “Administrator” (single-byte alphabet and numbers) account.
Install
Details
Download procedures
- Download SonicStageSecurityUpdateProgram-1.0.00.11020.exe and save it on the Desktop.
- The file can be saved at another location besides the Desktop.
- The download file size is 3.11MB.
Security Update Procedures
- Quit SonicStage® and all other applications.
- Double-click on the saved SonicStageSecurityUpdateProgram-1.0.00.11020.exe and follow the instructions to complete the update.
How to check the Security Update Program has been executed
- Start SonicStage program.
- At the main program screen, click the Help option on the menu, and then click About SonicStage.
- At the About SonicStage window, under Module Version, verify that SonicStage® Security Update Program 1.0.00.11020 is listed.
Note:Please contact your local Sony office, if you encounter any problem while performing the SonicStage Security Update.