Text in Outlook that represents Internet and network paths must not be automatically turned into hyperlinks.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-41493	DTOO425	SV-55984r1_rule		Medium

Description
The ability of Outlook to automatically turn text that represents Internet and network paths into hyperlinks would allow users to click on those hyperlinks in email messages and access malicious or otherwise harmful websites.

STIG	Date
Microsoft Outlook 2010	2014-04-03

Details

Check Text ( C-49263r2_chk )
Verify "Internet and network path into hyperlinks" is not configured. 1. From the main Outlook window, go to Tools > Options 2. Click on the Mail Format tab > Editor Options 3. In the left pane, navigate to and click on Proofing 4. In the right pane, click on the AutoCorrect Option button 5. Click on the AutoFormat tab Criteria: If the "Internet and network path into hyperlinks" checkbox is unchecked, this is not a finding.

Check Text ( C-49263r2_chk )

Verify "Internet and network path into hyperlinks" is not configured.

1. From the main Outlook window, go to Tools > Options
2. Click on the Mail Format tab > Editor Options
3. In the left pane, navigate to and click on Proofing
4. In the right pane, click on the AutoCorrect Option button
5. Click on the AutoFormat tab

Criteria: If the "Internet and network path into hyperlinks" checkbox is unchecked, this is not a finding.

Fix Text (F-48823r3_fix)
1. From the main Outlook window, go to Tools > Options 2. Click on the Mail Format tab > Editor Options 3. In the left pane, navigate to and click on Proofing 4. In the right pane, click on the AutoCorrect Option button 5. Click on the AutoFormat tab "Internet and network path into hyperlinks" checkbox must be unchecked.