Title

Outlook is not configured to read HTML as text. (Cat II impact)

Discussion

HTML in email can potentially contain mobile code. This parameter will ensure that mobile code can not be executed in either the preview pane or when the message is opened.

Check Content

Procedure: Start the Outlook application. On the Tools menu, select the Options… item. On the Options window, select Preferences. Examine the E-Mail options. Criteria: If the Read all standard mail in plain text check box is checked, this is not a finding. ---- This check only applies to Office XP and 2003.

Fix Text

In Outlook go to the Tools menu and select the Options... item. On the Options window, select Preferences and examine the E-Mail options. Make sure the Read "all standard mail in plain text" check box is checked.

Additional Identifiers

Rule ID: SV-6393r1_rule

Vulnerability ID: V-6323

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.