Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-71673 | DTOO322 | SV-86297r1_rule | Medium |
Description |
---|
Enabling this setting allows a user to open fatally corrupt Publisher 2016 files. As a result, malicious code or users could become active on the user's computer or the network. For example, a malicious user may purposely corrupt a Publisher file. The corrupted file could force the application to fail or execute malicious code, giving the malicious user control of Publisher 2016. |
STIG | Date |
---|---|
Microsoft Publisher 2016 STIG | 2016-12-19 |
Check Text ( None ) |
---|
None |
Fix Text (F-46184r1_fix) |
---|
Set the policy value for User Configuration -> Administrative Templates -> Microsoft Publisher 2016 -> Security "Prompt to allow fatally corrupt files to open instead of blocking them" to "Disabled". |