Over the weekend a Finnish researcher named Muzzy noticed a potential vulnerability in the web-based uninstaller that Sony offers to users who want to remove the First4Internet XCP copy protection software. We took a detailed look at the software and discovered that it is indeed possible for an attacker to exploit this weakness. For affected users, this represents a far greater security risk than even the original Sony rootkit.
The consequences of the flaw are severe. It allows any web page you visit to download, install, and run any code it likes on your computer. Any web page can seize control of your computer; then it can do anything it likes. That’s about as serious as a security flaw can get.
Tuesday, November 15, 2005
Sony’s Web-Based Uninstaller Opens a Big Security Hole; Sony to Recall Discs
Right, well what more needs to be said really, sony's fucked up big time. So let them know, dont bother wrighting to them, just dont buy their crap any more they will soon get the message.
Posted by Wes at 5:05 pm