DTOO127 – InfoPath – Application add-ins must be signed by Trusted Publisher.
Details Office 2010 applications do not check the digital signature on application add-ins before opening them. Disabling or not configuring...
- Home
- Security Hardening
- DISA STIG Office 2010 InfoPath V1R11
DISA STIG Office 2010 InfoPath V1R11
DTOO128 – InfoPath – Data Execution Prevention must be enforced.
Details Data Execution Prevention (DEP) is a set of hardware and software technologies performing additional checks on memory to help...DTOO131 – InfoPath – Trust Bar Notifications for unsigned application add-ins must be blocked.
Details If an application is configured to require all add-ins be signed by a trusted publisher, any unsigned add-ins the...DTOO133 – InfoPath – All automatic loading from Trusted Locations must be disabled.
Details Trusted locations specified in the Trust Center are used to define file locations assumed to be safe. Content, code,...DTOO156 – InfoPath – Offline Mode capability to cache queries for offline mode must be configured.
Details InfoPath can function in online mode or offline mode. It can also cache queries for use in offline mode....DTOO157 – InfoPath – Redirection behavior for upgraded web sites by SharePoint must be blocked.
Details InfoPath automatically redirects user requests for sites that have not been upgraded to the temporary URL if it is...DTOO158 – InfoPath – Disabling the opening of solutions from the Internet Security Zone must be configured.
Details Attackers could use InfoPath solutions published to Internet Web sites to try to obtain sensitive information from users. By...DTOO159 – InfoPath – Disabling of Fully Trusted Solutions access to computers must be configured.
Details InfoPath users can choose whether to allow trusted forms to run on their computers. The Full Trust security level...DTOO160 – InfoPath – Unsafe file types must be prevented from being attached to InfoPath forms.
Details Users can attach any type of file to forms except potentially unsafe files that might contain viruses, such as...DTOO171 – InfoPath – Disabling email forms running in Restricted Security Level must be configured.
Details InfoPath forms running with the restricted security level, can only access data stored on the forms. However, a malicious...