Details

Allowing online presentations to be created programmatically allows for the capability of malicious content to become imbedded in those programmatically created presentations.

Solution

Set the policy value for User Configuration -> Administrative Templates -> Microsoft Office 2013 -> Present Online -> ‘Restrict programmatic access for creating online presentations in PowerPoint and Word’ to ‘Enabled’.

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_OfficeSystem_2013_V2R1_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Windows.

References

• 800-53|SC-18(4)
• CAT|II
• CCI|CCI-001170
• Rule-ID|SV-228546r508020_rule
• STIG-ID|DTOO409
• STIG-Legacy|SV-53211
• STIG-Legacy|V-40879
• Vuln-ID|V-228546

Source

• Tenable.com/audits