DTOO291 - Automatic download of linked images must be disallowed.

Information

When users insert images into PowerPoint presentations, they can select Link to File instead of Insert. If they do so, the image is represented by a link to a file on disk instead of being embedded in the presentation file itself. By default, when PowerPoint opens a presentation it does not display any linked images saved on a different computer unless the presentation itself is saved in a trusted location (as configured in the Trust Center). If this configuration is changed, PowerPoint will load any images that were saved in remote locations, which presents a security risk.

Solution

Set the policy value for User Configuration -> Administrative Templates -> Microsoft PowerPoint 2013 -> PowerPoint Options -> Security 'Unblock automatic download of linked images' to 'Disabled'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_PowerPoint_2013_V1R7_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-18(3), CAT|II, CCI|CCI-001169, Rule-ID|SV-242769r961089_rule, STIG-ID|DTOO291, STIG-Legacy|SV-55919, STIG-Legacy|V-17809, Vuln-ID|V-242769

Plugin: Windows

Control ID: 39c0c96441ecba8566b4f759d38aae645377fcaa9baa2771eb3a88555c65bdb5