Save files default format must be configured.

From Microsoft Excel 2010

Part of DTOO139 - Save files default format

SV-33437r1_rule Save files default format must be configured.

Vulnerability discussion

When users create new Excel files, Excel 2010 saves them in the new *.xlsx format. Ensure this setting is enabled to specify all new files are created in Excel 2010. If a new file is created in an earlier format, some users may not be able to open or use the file, or they may choose a format this is less secure than the Excel 2010 format. Users can still select a specific format when they save files, but they cannot change default of this setting from the Excel Options dialog box. This enforced user behavior ensures any change to the file format requires additional deliberate user interaction.

Check content

The policy value for User Configuration -> Administrative Templates -> Microsoft Excel 2010 -> Excel Options -> Save "default file format" must be set to "Enabled (Excel Workbook *.xlsx)". Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\14.0\excel\options Criteria: If the value DefaultFormat is REG_DWORD = 0x00000033(hex) or 51 (Decimal), this is not a finding.

Fix text

Set the policy value for User Configuration -> Administrative Templates -> Microsoft Excel 2010 -> Excel Options -> Save "default file format" to "Enabled (Excel Workbook *.xlsx)".

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.