From Eugene.Leitl@lrz.uni-muenchen.de Fri Dec 7 08:08:25 2001 From: Eugene Leitl To: cypherpunks-legacy@lists.cpunks.org Subject: IP-FLASH Office XP, Windows XP May Send Sensitive Documents toMicrosoft (fwd) Date: Fri, 07 Dec 2001 08:08:25 +0000 Message-ID: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============1376659442276832031==" --===============1376659442276832031== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit -- Eugen* Leitl leitl ______________________________________________________________ ICBMTO: N48 04'14.8'' E11 36'41.2'' http://www.lrz.de/~ui22204 57F9CFD3: ED90 0433 EB74 E4A9 537F CFF5 86E7 629B 57F9 CFD3 ---------- Forwarded message ---------- Date: Fri, 07 Dec 2001 07:59:49 -0500 From: David Farber To: ip-flash Subject: IP-FLASH Office XP, Windows XP May Send Sensitive Documents to Microsoft PROBLEM: Microsoft Office XP and Internet Explorer version 5 and later are configured to request to send debugging information to Microsoft in the event of a program crash. The debugging information includes a memory dump which may contain all or part of the document being viewed or edited. This debug message potentially could contain sensitive, private information. PLATFORM: · Microsoft Office XP · Microsoft Internet Explorer 5.0 and later · Windows XP · Microsoft has indicated that this will be a feature of all new Microsoft products DAMAGE: Sensitive or private information could inadvertently be sent to Microsoft. Some simple testing of the feature found document information in one message out of three. SOLUTION: Apply the registry changes listed in this bulletin to disable the automatic sending of debugging information. If you are working with sensitive information and a program asks to send debugging information to Microsoft, you should click Don't Send. http://www.ciac.org/ciac/bulletins/m-005.shtml --===============1376659442276832031==--