Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-26707 | DTOO322 - Publisher | SV-34092r1_rule | Medium |
Description |
---|
Enabling this setting allows user to open fatally corrupt Publisher 2010 files. As a result, malicious code or users could become active on user computers or the network. For example, a malicious user may purposely corrupt a Publisher file. The corrupted file could force the application to fail or execute malicious code, giving the malicious user control of Publisher 2010. |
STIG | Date |
---|---|
Microsoft Publisher 2010 | 2016-10-28 |
Check Text ( None ) |
---|
None |
Fix Text (F-30019r1_fix) |
---|
Set the policy value for User Configuration -> Administrative Templates -> Microsoft Publisher 2010 -> Security “Prompt to allow fatally corrupt files to open instead of blocking them” to “Disabled". |