IP-FLASH Office XP, Windows XP May Send Sensitive Documents to Microsoft

[David Farber <dave () farber net>]

PROBLEM: Microsoft Office XP and Internet Explorer version 5 and later are 
configured to request to send debugging information to Microsoft in the 
event of a program crash. The debugging information includes a memory dump 
which may contain all or part of the document being viewed or edited. This 
debug message potentially could contain sensitive, private information.

PLATFORM:

·       Microsoft Office XP
·       Microsoft Internet Explorer 5.0 and later
·       Windows XP
·       Microsoft has indicated that this will be a feature of all new 
Microsoft products

DAMAGE: Sensitive or private information could inadvertently be sent to 
Microsoft. Some simple testing of the feature found document information in 
one message out of three. SOLUTION: Apply the registry changes listed in 
this bulletin to disable the automatic sending of debugging information. If 
you are working with sensitive information and a program asks to send 
debugging information to Microsoft, you should click Don't Send.

http://www.ciac.org/ciac/bulletins/m-005.shtml