DTOO172 – InfoPath – Disabling email forms from the Internet Security Zone must be configured.
Details InfoPath e-mail forms can be designed by an external attacker and sent over the Internet as part of a...
- Home
- Security Hardening
- DISA STIG Office 2010 InfoPath V1R11
DISA STIG Office 2010 InfoPath V1R11
DTOO173 – InfoPath – Disabling of email forms from the Full Trust Security Zone must be configured.
Details InfoPath provides three security levels for form templates: Restricted, Domain, and Full Trust. The security levels determine whether a...DTOO176 – InfoPath – Email with InfoPath forms must be configured to show UI to recipients.
Details Malicious users could send e-mail InfoPath forms with embedded Web beacons that can be used to track when recipients...DTOO164 – InfoPath – Beaconing UI shown for opened forms must be configured.
Details Malicious users can create InfoPath forms with embedded Web beacons that can be used to contact an external server...DTOO165 – InfoPath – Beaconing of UI forms with ActiveX controls must be enforced.
Details InfoPath makes it possible to host InfoPath forms in other applications as ActiveX controls. Such controls are known as...DTOO167 – InfoPath – Opening behavior for EMail forms containing code or scripts must be controlled.
Details InfoPath notifies and prompts users before opening InfoPath e-mail forms that contain code or script. If this restriction is...DTOO168 – InfoPath – Disabling sending form templates with the email forms must be configured.
Details InfoPath allows users to attach form templates when sending e-mail forms. If users are able to open form templates...DTOO169 – InfoPath – Dynamic caching of InfoPath eMail forms must be disabled.
Details InfoPath caches form templates when they are attached to a mail item recognized as an InfoPath e-mail form. When...DTOO170 – InfoPath – InfoPath 2003 forms as email forms in InfoPath 2010 must be disallowed.
Details An attacker might target InfoPath 2003 forms to try and compromise an organization’s security. InfoPath 2003 did not write...DTOO294 – InfoPath – InfoPath must be enforced to not use e-mail forms from the Intranet security zone.
Details InfoPath e-mail forms can be designed by an internal attacker and sent over the local intranet, and users might...