How do I disable Gracenote CDDBControl Active X?

Question

How do I disable Gracenote CDDBControl Active X?

There is a highly critical security advisory regarding
Gracenote CDDBControl Active X.
iTunes uses Gracenote CDDBControl Active X.

Went to Gracenote website, they have a general patch
for this problem, windows only.

I am using iTunes v.6.0.4. I use CDDBControl when
importing albums from C.D. to iTunes Library.

Sorry to post here, did not know where else to find
information regarding disabling this.
I am and will continue to use Mac OS 10.2.8, unfortunately
I do not appear to get any security related downloads
from Software Update.

Thank You,
J. B.

Mac G4 450 mghz [OS 10.2.8] Toshiba P.C. Notebook [Windows XP] Mac OS X (10.2.x) AirPort Basestation, Dual Ethernet. DSL Wireless Network

Posted on Jun 28, 2006 1:02 PM

Reply

Answer 1

macmenno

Level 6

10,080 points

Jun 28, 2006 3:01 PM in response to Judith Boatman

I'm not familiar with the security problem you mention, but this script can prevent iTunes from accessing Gracenote.
It's not a fix for your problem, but could be useful.

Hope this helps.

M

17' iMac fp 800 MHz 768 MB RAM Mac OS X 10.4.7 Several ext. HD (backup and data)

Reply

Answer 2

Jun 28, 2006 7:32 PM in response to macmenno

Thank You Macmenno,

I think link to that script will do the job.

Judith

Reply

Answer 3

Jun 28, 2006 7:42 PM in response to macmenno

macmenno,

Just checked out the website from your link, yea!
Fantastic website, thanks for link.

I get advisories from Secunia.

Again, thanks for link and that website. A keeper.

J.

Reply

Answer 4

varjak paw

Level 10

182,668 points

Jun 29, 2006 8:10 AM in response to Judith Boatman

BTW, Active X is applicable to Windows systems only. Macs do not run Active X and so are not affected by any security vulnerabilities Active X components may contain. So worry not.

Reply

Answer 5

Jun 29, 2006 10:32 AM in response to varjak paw

Mr. Sawyer,

My error regarding adding that Active X tag.
I have checked the advisory regarding Gracenote CDDB
at Gracenote website, yes the patch is for Sony products
and Windows, however they had area to search for
Mac Software as well, and indeed the problem is
cross platform.

I use Gracenote CDDB within my Mac iTunes all the
time, ergo the issue is of import to me.

I do not worry, I am a responsible computer user.
I also did a Finder search using Gracenote CDDB Control,
amazing, 100 hits on that one.

Before I run a for Mac script addressing the issue,
I will of course proceed with care.
Only posted this here because I no longer get Software
Update support, and no thanks to upgrading my G4.

Indeed I do have a rather new Toshiba that runs Windows
XP. I am a Windows newby, complicated that.
I do not use that Notebook for anything risky however.

Thank you for your input.
J.B.

Mac G4 450 mghz [OS 10.2.8] Toshiba P.C. Notebook [Windows XP] Mac OS X (10.2.x) AirPort Basestation, Dual Ethernet. DSL Wireless Network

Reply

Answer 6

Jul 5, 2006 1:17 PM in response to Judith Boatman

The security issue is only for a small number of Gracenote-enabled Windows applications. More details are available here:
http://www.gracenote.com/corporate/FAQs.html/faqset=security/page=0
but the short answer is MacOS applications are not affected, and the Windows version of iTunes is not affected.

Shuttle Windows 2000

Reply

Answer 7

Jul 5, 2006 1:19 PM in response to macmenno

Of course, you'll now have to hand-type all the tags for any tracks you rip from CD if you disable access to the Gracenote CDDB service.

Shuttle Windows 2000

Reply

Answer 8

Jul 5, 2006 3:55 PM in response to justaguess

I am so sorry to disagree with you on either Mac or
Windows using the Gracenote CDDB were not affected.

Just a day after, perhaps two days, and through
Software Update, my 6.0.4 iTunes was indeed upgraded
to v. 6.0.5. Also the Windows version upgraded.

Part of reason being, security regarding the AAC Codec
I convert/import all my music using the AAC encoder.

Having to type the track names etc. a non factor to me,
I am a typist.

Remain open minded, tis my hope for all computer users.

J.

Mac G4 450 mghz [OS 10.2.8] Toshiba P.C. Notebook [Windows XP] Mac OS X (10.2.x) AirPort Basestation, Dual Ethernet. DSL Wireless Network

Reply