Skip to content

Microsoft PowerPoint 2010 STIG

Rules, Groups, and Values defined within the XCCDF Benchmark

  • ActiveX Installs must be configured for proper restriction.

    Microsoft ActiveX controls allow unmanaged, unprotected code to run on the user computers. ActiveX controls do not run within a protected container in the browser like the other types of HTML or Mi...
    Rule Medium Severity
  • DTOO132 - Restrict File Download

    Group
  • File Downloads must be configured for proper restrictions.

    Disabling this setting allows websites to present file download prompts via code without the user specifically initiating the download. User preferences may also allow the download to occur withou...
    Rule Medium Severity
  • DTOO124 - Scripted Window Security

    Group
  • DTOO127 - Add-ins are signed by Trusted Publisher

    Group
  • Application add-ins must be signed by Trusted Publisher.

    Office 2010 applications do not check the digital signature on application add-ins before opening them. Disabling or not configuring this setting may allow an application to load a dangerous add-i...
    Rule Medium Severity
  • DTOO128 - Data Execution Prevention

    Group
  • Data Execution Prevention must be enforced.

    Data Execution Prevention (DEP) is a set of hardware and software technologies performing additional checks on memory to help prevent malicious code from running on a system. The primary benefit of...
    Rule Medium Severity
  • DTOO119 - Turn off file validation

    Group
  • Configuration for file validation must be enforced.

    Office Binary Documents (97-2003) are checked to see if they conform against the file format schema before they are opened.
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules