Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-26707 | DTOO322 | SV-53255r1_rule | ECSC-1 | Medium |
Description |
---|
Enabling this setting allows a user to open fatally corrupt Publisher 2013 files. As a result, malicious code or users could become active on the user's computer or the network. For example, a malicious user may purposely corrupt a Publisher file. The corrupted file could force the application to fail or execute malicious code, giving the malicious user control of Publisher 2013. |
STIG | Date |
---|---|
Microsoft Publisher 2013 STIG | 2015-07-24 |
Check Text ( None ) |
---|
None |
Fix Text (F-46184r1_fix) |
---|
Set the policy value for User Configuration -> Administrative Templates -> Microsoft Publisher 2013 -> Security "Prompt to allow fatally corrupt files to open instead of blocking them" to "Disabled". |