Microsoft Word 2010 Security Technical Implementation Guide

Version: 1

Updated: 17 Jul 2024

Findings: 36

Findings

V-242277 - Disabling of user name and password syntax from being used in URLs must be enforced. (medium)
V-242278 - Blocking as default file block opening behavior must be enforced. (medium)
V-242279 - Enabling IE Bind to Object functionality must be present. (medium)
V-242280 - Saved from URL mark to assure Internet zone processing must be enforced. (medium)
V-242281 - Configuration for file validation must be enforced. (medium)
V-242282 - Files from the Internet zone must be opened in Protected View. (medium)
V-242283 - Navigation to URL's embedded in Office products must be blocked. (medium)
V-242284 - Scripted Window Security must be enforced. (medium)
V-242285 - Add-on Management functionality must be allowed. (medium)
V-242286 - Application add-ins must be signed by Trusted Publisher. (medium)
V-242287 - Data Execution Prevention must be enforced. (medium)
V-242288 - Links that invoke instances of IE from within an Office product must be blocked. (medium)
V-242289 - Trust Bar Notifications for unsigned application add-ins must be blocked. (medium)
V-242290 - File Downloads must be configured for proper restrictions. (medium)
V-242291 - All automatic loading from Trusted Locations must be disabled. (medium)
V-242292 - Disallowance of Trusted Locations on the network must be enforced. (medium)
V-242293 - Save files default format must be configured. (medium)
V-242294 - Force encrypted macros to be scanned in open XML documents must be determined and configured. (medium)
V-242295 - Trust access for VBA must be disallowed. (medium)
V-242296 - Protection from zone elevation must be enforced. (medium)
V-242297 - Pre-release versions of file formats new to Office Products must be blocked. (medium)
V-242298 - ActiveX Installs must be configured for proper restriction. (medium)
V-242299 - Files in unsafe locations must be opened in Protected View. (medium)
V-242300 - Document behavior if file validation fails must be set. (medium)
V-242301 - Attachments opened from Outlook must be in Protected View. (medium)
V-242302 - The automatically update links feature must be configured as off. (medium)
V-242303 - A warning before printing that the document contains tracking changes must be provided. (medium)
V-242304 - Warning Bar settings for VBA macros must be configured. (medium)
V-242305 - Online translation dictionaries must be in use. (medium)
V-242306 - Word 2 and earlier binary documents and templates must be blocked for open/save. (medium)
V-242307 - Word 2000 binary documents and templates must be configured to edit in protected view. (medium)
V-242308 - Word 6.0 binary documents and templates must be configured for block open/save actions. (medium)
V-242309 - Word 95 binary documents and templates must be configured to edit in protected view. (medium)
V-242310 - Word 97 binary documents and templates must be configured to edit in protected view. (medium)
V-242311 - Word XP binary documents and templates must be configured to edit in protected view. (medium)
V-265901 - The version of Microsoft Word running on the system must be a supported version. (high)