This shouldn't happen, but it did once for me. Heisencope.

git-svn-id: svn+ssh://src.earth.threerings.net/nenya/trunk@711 ed5b42cb-e716-0410-a449-f6a68f950b19

src/as/com/threerings/flash/media/Mp3AudioPlayer.as

@@ -121,7 +121,14 @@ public class Mp3AudioPlayer extends EventDispatcher
     // from AudioPlayer
     public function getMetadata () :Object
     {
-        return (_sound == null) ? null : _sound.id3;
+        if (_sound != null) {
+            try {
+                return _sound.id3;
+            } catch (err :SecurityError) {
+                Log.getLog(this).warning("Can't read id3 data", err);
+            }
+        }
+        return null;
     }
 
     // from AudioPlayer
@@ -192,7 +199,7 @@ public class Mp3AudioPlayer extends EventDispatcher
 
     protected function handleId3 (event :Event) :void
     {
-        dispatchEvent(new ValueEvent(MediaPlayerCodes.METADATA, _sound.id3));
+        dispatchEvent(new ValueEvent(MediaPlayerCodes.METADATA, getMetadata()));
     }
 
     /**