DTOO114 - Open/Save actions for Excel 2 worksheets must be blocked.

Information

This setting specifies whether users can open, view, edit, or save files saved in the specified format. Enabling block of the specified format mitigates zero-day security attacks (which are attacks that occur between the time that a vulnerability becomes publicly known and a software update or service pack is available) by temporarily preventing users from opening specific types of files and to prevent a user from opening files that have been saved in earlier and pre-release (beta) Microsoft Office formats.

Solution

Set the policy value for User Configuration -> Administrative Templates -> Microsoft Excel 2013 -> Excel Options -> Security -> Trust Center -> File Block Settings 'Excel 2 worksheets' to 'Enabled: Open/Save blocked, use open policy'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Excel_2013_V1R8_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-18(1), CAT|II, CCI|CCI-001662, Rule-ID|SV-242339r961086_rule, STIG-ID|DTOO114, STIG-Legacy|SV-53624, STIG-Legacy|V-26598, Vuln-ID|V-242339

Plugin: Windows

Control ID: a2adac2b030c0180d416fc0c1e08ce32c3fbb78457424e3dd1a3e463546df1a5