Document behavior if file validation fails must be set.

From Microsoft PowerPoint 2010

SV-33869r1_rule Document behavior if file validation fails must be set.

Vulnerability discussion

This policy key controls the behavior of how Office documents should be handled when failing File Validation. The options available are:-Block files completely. This will prevent users from opening files.-Open files in Protected View and disallow edit. This will prevent users from editing the files.-Open files in Protected view and allow edit. This will allow users to edit the files.If disabling or not configuring this policy setting, the default setting will be, "open files in protected view and allow edit".

Check content

The policy value for User Configuration -> Administrative Templates -> Microsoft PowerPoint 2010 -> PowerPoint Options -> Security -> Trust Center -> Protected View “Set document behavior if file validation fails” must be "Enabled: Open in Protected View" and Unchecked for "Do not allow edit". Procedure: Use the Windows Registry Editor to navigate to the following keys: HKCU\Software\Policies\Microsoft\Office\14.0\powerpoint\security\filevalidation Criteria: If the value OpenInProtectedView is REG_DWORD = 1, this is not a finding. AND HKCU\Software\Policies\Microsoft\Office\14.0\powerpoint\security\filevalidation Criteria: If the value DisableEditFromPV is REG_DWORD = 1, this is not a finding.

Fix text

Set the policy value for User Configuration -> Administrative Templates -> Microsoft PowerPoint 2010 -> PowerPoint Options -> Security -> Trust Center -> Protected View “Set document behavior if file validation fails” to "Enabled: Open in Protected View" and Unchecked for "Do not allow edit".

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.