What changed in Microsoft Publisher 2013 STIG V1R6V1R6 changes

Microsoft Publisher 2013 STIG V1R6 (2024-07-24) replaced V1R5 (2018-04-27): 16 checks added, 15 removed. It has 16 checks, against 15 in V1R5.

V1R6 checklistV1R5 checklist Compare V1R5 and V1R6 in STIG Compare

  • 16 added
  • 15 removed
  • 0 updated

Added in V1R6 (16)

  • V-242799CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
  • V-242800CAT IIThe Internet Explorer Bind to Object functionality must be enabled.
  • V-242801CAT IIThe Saved from URL mark must be selected to enforce Internet zone processing.
  • V-242802CAT IINavigation to URLs embedded in Office products must be blocked.
  • V-242803CAT IIScripted Window Security must be enforced.
  • V-242804CAT IIAdd-on Management functionality must be allowed.
  • V-242805CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
  • V-242806CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked.
  • V-242807CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
  • V-242808CAT IIFile Downloads must be configured for proper restrictions.
  • V-242809CAT IIProtection from zone elevation must be enforced.
  • V-242810CAT IIActiveX Installs must be configured for proper restriction.
  • V-242811CAT IIWarning Bar settings for VBA macros must be configured.
  • V-242812CAT IIFatally corrupt files must be blocked from opening.
  • V-242813CAT IIThe Publisher Automation Security Level must be configured for high security.
  • V-265899CAT IThe version of Microsoft Publisher running on the system must be a supported version.

Removed since V1R5 (15)

  • V-17173CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
  • V-17184CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked.
  • V-17187CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
  • V-17545CAT IIWarning Bar settings for VBA macros must be configured.
  • V-26584CAT IIAdd-on Management functionality must be allowed.
  • V-26585CAT IIProtection from zone elevation must be enforced.
  • V-26586CAT IIActiveX Installs must be configured for proper restriction.
  • V-26587CAT IIFile Downloads must be configured for proper restrictions.
  • V-26589CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
  • V-26707CAT IIFatally corrupt files must be blocked from opening.
  • V-26708CAT IIThe Publisher Automation Security Level must be configured for high security.
  • V-40893CAT IIThe Internet Explorer Bind to Object functionality must be enabled.
  • V-40894CAT IIThe Saved from URL mark must be selected to enforce Internet zone processing.
  • V-40895CAT IINavigation to URLs embedded in Office products must be blocked.
  • V-40896CAT IIScripted Window Security must be enforced.

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R6 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.