UCF STIG Viewer Logo

Microsoft Excel 2007

Findings (MAC III - Administrative Sensitive)

Finding ID Severity Title
V-17187 Medium Disable Trust Bar Notification for unsigned application add-ins - Excel
V-17184 Medium Block pop-ups for links that invoke instances of IE from within Excel
V-17183 Medium Block navigation to URL embedded in Office products to protect against attack by malformed URL.
V-17744 Medium AutoRepublish Warning Alert should be enabled - Excel
V-17621 Medium Force file extension to match file type created - Excel
V-17521 Medium Save files default format as backward compatible, not as XML.
V-17520 Medium Disable settings for content and add-ins that "Allow trusted locations not on computer" that might bypass more stringent security checks.
V-17522 Medium Disable Trust access for VBA into Excel, Word, and PowerPoint.
V-17173 Medium Disable user name and password syntax from being used in URLs
V-17174 Medium Bind to Object - Excel
V-17175 Medium Evaluate Saved from URL mark when launched from Excel
V-17545 Medium Enable Warning Bar settings for VBA macros contained in Excel Files.
V-17503 Medium Disable feature that would block older version of office products from saving files to open XML formats.
V-17804 Medium Store macro in Personal macro Workbook by default - Excel.
V-17751 Medium Do not Load pictures from web pates not created in Excel
V-17322 Medium Block opening of pre-release versions of file formats new to Excel 2007 through the Compatibility Pack for the 2007 Office system and Excel 2007 Converter - System
V-17652 Medium Disable the automatic republish to web pages for Excel documents having that link.
V-17732 Medium Ask user to update automatic links instead of automatically updating spreadsheet - Excel.
V-17650 Medium Create configuration to prevent Internet links and Network UNCs from being created as embedded hyperlinks.
V-17518 Medium Block opening of "open XML" format files created by pre-release versions of Excel.
V-17519 Medium Block Opening of "Open XML" file types to prevent them automatically executing code.
V-17473 Medium Determine whether to force encrypted macros to be scanned in open XML workbooks.
V-17471 Medium Disable all Trusted Locations.
V-17796 Medium Do not save additional data needed to maintain formulas - Excel.