The company said it acted as quickly as it could and it expected to be able to go public when a software patch was available, but Russinovich posted the issue on his blog first. This forced Sony BMG to recall millions of CDs from 52 artists and offer "swap deals" to consumers who had bought the CDs. "We're very, very sorry for the disruption and inconvenience that this has caused to music consumers," said Thomas Hesse, president of Sony BMG's Global Digital Business.
XCP was developed by UK-based First4Internet. The DRM software applies limitations on how consumers can copy the CD's contents. The problem is that it uses file hiding techniques, similar to those used by virus writers to hide malicious software. This file hiding capability has also been exploited by virus writers ever since the issue went public.
Source:
BusinessWeek