Text in Outlook that represents Internet and network paths must not be automatically turned into hyperlinks.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-41493	DTOO425	SV-55983r1_rule		Medium

Description
The ability of Outlook to automatically turn text that represents Internet and network paths into hyperlinks would allow users to click on those hyperlinks in email messages and access malicious or otherwise harmful websites.

STIG	Date
Microsoft Outlook 2007	2014-01-07

Details

Check Text ( C-49262r2_chk )
Verify "Internet and network path into hyperlinks" is not configured. 1. From the main Outlook window, go to Tools > Options 2. Click on the Mail Format tab 3. Click on the Editor Options button 4. In the left pane, click on the Proofing button 5. Click on the AutoCorrect button 6. Click on the AutoFormat As You Type tab Criteria: If the "Internet and network path into hyperlinks" checkbox is unchecked, this is not a finding.

Check Text ( C-49262r2_chk )

Verify "Internet and network path into hyperlinks" is not configured.

1. From the main Outlook window, go to Tools > Options
2. Click on the Mail Format tab
3. Click on the Editor Options button
4. In the left pane, click on the Proofing button
5. Click on the AutoCorrect button
6. Click on the AutoFormat As You Type tab

Criteria: If the "Internet and network path into hyperlinks" checkbox is unchecked, this is not a finding.

Fix Text (F-48822r4_fix)
1. From the main Outlook window, go to Tools > Options 2. Click on the Mail Format tab 3. Click on the Editor Options button 4. In the left pane, click on the Proofing button 5. Click on the AutoCorrect button 6. Click on the AutoFormat As You Type tab "Internet and network path into hyperlinks" checkbox must be unchecked.