-- Eugen* Leitl <a href="http://www.lrz.de/~ui22204/">leitl</a>
______________________________________________________________
ICBMTO: N48 04'14.8'' E11 36'41.2'' http://www.lrz.de/~ui22204
57F9CFD3: ED90 0433 EB74 E4A9 537F CFF5 86E7 629B 57F9 CFD3
---------- Forwarded message ----------
Date: Fri, 07 Dec 2001 07:59:49 -0500
From: David Farber
To: ip-flash
Subject: IP-FLASH Office XP,
Windows XP May Send Sensitive Documents to Microsoft
PROBLEM: Microsoft Office XP and Internet Explorer version 5 and later are
configured to request to send debugging information to Microsoft in the
event of a program crash. The debugging information includes a memory dump
which may contain all or part of the document being viewed or edited. This
debug message potentially could contain sensitive, private information.
PLATFORM:
· Microsoft Office XP
· Microsoft Internet Explorer 5.0 and later
· Windows XP
· Microsoft has indicated that this will be a feature of all new
Microsoft products
DAMAGE: Sensitive or private information could inadvertently be sent to
Microsoft. Some simple testing of the feature found document information in
one message out of three. SOLUTION: Apply the registry changes listed in
this bulletin to disable the automatic sending of debugging information. If
you are working with sensitive information and a program asks to send
debugging information to Microsoft, you should click Don't Send.
http://www.ciac.org/ciac/bulletins/m-005.shtml
