About this download

5th December, 2007

Sony today announced the release of a security update program to address potential security vulnerability resulting from a buffer overflow in some versions of SonicStageCP® music management software, announced by Sony on November 7th, 2007. SonicStage® users are requested to download the security update program in accordance with the following procedures.

Version of SonicStage® subject to security update

  • SonicStage® CP (SonicStage® Versions 4.0/4.1/4.2/4.3)
    *Upgraded SonicStage® versions are also subject to this security update.

Description of update

This security update program fixes a potential buffer overflow when importing certain malicious play list (m3u) files that could cause the above listed versions of SonicStage® to crash and execute an arbitrary code.
CVE-ID*: CVE-2007-5709
Sony gives credit to Secunia for discovering and reporting this issue.

*CVE (Common Vulnerabilities and Exposures) is a vulnerabilities issue list identification number.

Before Downloading the Security Update Program

How to Check Version Eligibility

  1. Start the SonicStage program.
  2. At the main program screen, click the Help option on the menu, and then click About SonicStage.
  3. At the About SonicStage window, check to see if the version number begins with 4.0, 4.1, 4.2, or 4.3. Only SonicStage versions 4.0/4.1/4.2/4.3 are subjected to the security update.

Important Notes

  • This update program is provided to users under the conditions of customer’s SonicStage® Software Legal Agreement.
  • To ensure that no other program interferes with the installation, save all work and close all other programs. The Taskbar should be clear of applications before proceeding.

Available Downloads:

SonicStage CP Security Update Program
File name: SonicStageSecurityUpdateProgram-1.0.00.11020.exe
File size: 3.11 MB

File Info

File Name

  • SonicStage CP® (SonicStage® Ver.4.0/4.1/4.2/4.3) Security Update Program

File Version

  • 1.0.00.11020

File Size

  • 3.11MB

Release Date

  • 2007-12-05

System Requirements

  • Windows XP
  • Windows Vista

Download

For Windows Vista® and Windows XP® Users

When downloading the security update with Windows Vista® or Windows XP®, execute update after logging on with user name that belongs to computer manager or manager.

Windows Vista® may display dialog boxes such as "Windows® needs your permission to continue" which controls the user account.
Check the content and continue operations following the displayed announcement.

For Windows 2000® Users

When downloading the security update with Windows 2000 Professional®, use the “Administrator” (single-byte alphabet and numbers) account.

Install

Details

Download procedures

  1. Download SonicStageSecurityUpdateProgram-1.0.00.11020.exe and save it on the Desktop.
    - The file can be saved at another location besides the Desktop.
    - The download file size is 3.11MB.

Security Update Procedures

  1. Quit SonicStage® and all other applications.
  2. Double-click on the saved SonicStageSecurityUpdateProgram-1.0.00.11020.exe and follow the instructions to complete the update.

How to check the Security Update Program has been executed

  1. Start SonicStage program.
  2. At the main program screen, click the Help option on the menu, and then click About SonicStage.
  3. At the About SonicStage window, under Module Version, verify that SonicStage® Security Update Program 1.0.00.11020 is listed.

Note:Please contact your local Sony office, if you encounter any problem while performing the SonicStage Security Update.