Skip to content

Microsoft Outlook 2010 STIG

Rules, Groups, and Values defined within the XCCDF Benchmark

  • File Downloads must be configured for proper restrictions.

    <VulnDiscussion>Disabling this setting allows websites to present file download prompts via code without the user specifically initiating the...
    Rule Medium Severity
  • DTOO124 - Scripted Window Security

    <GroupDescription></GroupDescription>
    Group
  • Scripted Window Security must be enforced.

    &lt;VulnDiscussion&gt;Malicious websites often try to confuse or trick users into giving a site permission to perform an action allowing the site t...
    Rule Medium Severity
  • DTOO128 - Data Execution Prevention

    <GroupDescription></GroupDescription>
    Group
  • Data Execution Prevention must be enforced.

    &lt;VulnDiscussion&gt;Data Execution Prevention (DEP) is a set of hardware and software technologies performing additional checks on memory to help...
    Rule Medium Severity
  • DTOO313 - Automatically download enclosures

    <GroupDescription></GroupDescription>
    Group
  • Automatically downloading enclosures on RSS must be disallowed.

    &lt;VulnDiscussion&gt;This policy setting allows you to control whether Outlook automatically downloads enclosures on RSS items. &lt;/VulnDiscussio...
    Rule Medium Severity
  • DTOO344 - Outlook Rich Text options

    <GroupDescription></GroupDescription>
    Group
  • Outlook Rich Text options must be set for converting to plain text format.

    &lt;VulnDiscussion&gt;Outlook automatically converts RTF formatted messages that are sent over the Internet to HTML format, so that the message for...
    Rule Medium Severity
  • DTOO314 - Set message format

    <GroupDescription></GroupDescription>
    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules