IP-FLASH Office XP, Windows XP May Send Sensitive Documents toMicrosoft (fwd)

[Eugene Leitl]

-- Eugen* Leitl <a href="http://www.lrz.de/~ui22204/">leitl</a>
______________________________________________________________
ICBMTO: N48 04'14.8'' E11 36'41.2'' http://www.lrz.de/~ui22204
57F9CFD3: ED90 0433 EB74 E4A9 537F CFF5 86E7 629B 57F9 CFD3

---------- Forwarded message ----------
Date: Fri, 07 Dec 2001 07:59:49 -0500
From: David Farber <dave at farber.net>
To: ip-flash <ip-flash at majordomo.pobox.com>
Subject: IP-FLASH Office XP,
     Windows XP May Send Sensitive Documents to Microsoft

PROBLEM: Microsoft Office XP and Internet Explorer version 5 and later are
configured to request to send debugging information to Microsoft in the
event of a program crash. The debugging information includes a memory dump
which may contain all or part of the document being viewed or edited. This
debug message potentially could contain sensitive, private information.

PLATFORM:

·       Microsoft Office XP
·       Microsoft Internet Explorer 5.0 and later
·       Windows XP
·       Microsoft has indicated that this will be a feature of all new
Microsoft products

DAMAGE: Sensitive or private information could inadvertently be sent to
Microsoft. Some simple testing of the feature found document information in
one message out of three. SOLUTION: Apply the registry changes listed in
this bulletin to disable the automatic sending of debugging information. If
you are working with sensitive information and a program asks to send
debugging information to Microsoft, you should click Don't Send.

http://www.ciac.org/ciac/bulletins/m-005.shtml