Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. You cannot open linked file attachments in Outlook: "Outlook blocked access to the following potentially unsafe attachments"

You cannot open linked file attachments in Outlook: "Outlook blocked access to the following potentially unsafe attachments"

View products that this article applies to.

Important This article contains information that shows you how to help lower security settings or how to turn off security features on a computer. You can make these changes to work around a specific problem. Before you make these changes, we recommend that you evaluate the risks that are associated with implementing this workaround in your particular environment. If you implement this workaround, take any appropriate additional steps to help protect the computer.

↑ Back to the top

Symptoms

When you try to open a linked file attachment in a Microsoft Outlook message, Outlook blocks access to the link. When the issue occurs, you may receive a message that resembles the following in the Outlook Information Bar:

Outlook blocked access to the following potentially unsafe attachments: filename.


The attachments that are affected by this issue are fairly uncommon. They are typically created by custom solutions by using Extended MAPI or the Outlook object model to add functionality to a Microsoft Exchange mailbox or to a local set of Outlook folders.

↑ Back to the top

Cause

This issue occurs because, by default, Outlook 2010 and Outlook 2013 do not allow linked file attachments to be opened. Also, a July 2010 security update made a change to Outlook 2002, Outlook 2003, and Outlook 2007 to include this behavior.

For more information about this security update, click the following article number to view the article in the Microsoft Knowledge Base:

978212 MS10-045: Vulnerability in Help and Support Center could allow remote code execution


For more information, visit the following Microsoft Security Response Center bulletin:


http://www.microsoft.com/technet/security/bulletin/MS10-045.mspx

↑ Back to the top

Workaround

To work around this issue, use the following methods:
 
  • Method 1
    If you are a developer of a custom solution that uses linked file attachments, we recommend that you change the solution so that it no longer uses linked files. Specifically, avoid using the following options for an attachment's PR_ATTACH_METHOD property:
    • ATTACH_BY_REFERENCE
    • ATTACH_BY_REF_ONLY
    • ATTACH_BY_REF_RESOLVE

    One possible approach may be to use a hyperlink in the body of a message instead.
     
  • Method 2

    Warning This workaround may make a computer or a network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.

    ImportantThis section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
    322756 How to back up and restore the registry in Windows

    A registry entry can be used to prevent Outlook from blocking linked file attachments so that they can be opened directly. However, we do not recommend that you use this registry entry because doing this will reduce the security of Outlook, and may allow access to malicious attachments.

    To configure the AllowAttachByRef registry entry, add a DWORD value named AllowAttachByRef that has a value of 1.

    To add this registry entry, follow these steps:
    1. Click Start, click Run, type regedit in the Open box, and then click OK.
    2. Locate and then click one of the following subkeys in the registry:

       
      • Outlook 2013 (version 15.0)
        HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Security Or:HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\15.0\Outlook\Security 
      • Outlook 2010 (version 14.0)
        HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Security
        Or:HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\14.0\Outlook\Security
      • Outlook 2007 (version 12.0)
        HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\Security
        Or:HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\12.0\Outlook\Security
      • Outlook 2003 (version 11.0)
        HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Outlook\Security
        Or: HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\11.0\Outlook\Security
      • Outlook 2002 (version 10.0)
        HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Outlook\Security
        Or:

        HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\10.0\Outlook\Security
    3. On the Edit menu, point to New, and then click DWORD Value.
    4. Type AllowAttachByRef for the name of the DWORD, and then press ENTER.
    5. Right-click AllowAttachByRef, and then click Modify.
    6. In the Value data box, type 1, and then click OK.
    7. Exit Registry Editor, and then restart the computer.

    Important The AllowAttachByRef registry entry only re-enables ATTACH_BY_REFERENCE and ATTACH_BY_REF_ONLY attachments. ATTACH_BY_REF_RESOLVE attachments are still blocked.

↑ Back to the top

More Information

Outlook 2002 and earlier versions of Outlook allowed you to create linked attachments by using the Insert File command. However, this was only possible with messages that are formatted by using rich text. This feature is not available in newer versions of Outlook. However, you can insert hyperlinks in the body of the message instead.

The Outlook object model lets users create and send linked attachments. However, when these messages are sent, MAPI converts the linked attachment to an embedded attachment.

Because the overall matrix of scenarios is very large, and because Outlook also blocks other kinds of attachments, depending on the configuration, you should make sure to test the scenarios to see whether this issue may be related to unexpected behavior you may notice in Outlook. The best way to determine whether an attachment is a linked file is to use a MAPI-based tool such as MFCMAPI to check if the PR_ATTACH_METHOD property of the attachment is set to one of the following values:
ValueMAPI Flag
2ATTACH_BY_REFERENCE
3ATTACH_BY_REF_RESOLVE
4ATTACH_BY_REF_ONL
To use MFCMAPI to determine whether an attachment is a linked attachment, follow these steps:
  1. Start MFCMAPI.
  2. On the Session menu, click Logon and Display Store Table.
  3. Double-click one of the MAPI stores in the list to open that store. This is likely the store that contains the message that has the suspect attachment.
  4. Expand the folder tree in the navigation pane to find the correct folder, and then double-click the folder name to open that folder.
  5. Right-click the message that has the suspect attachment, and then click Display Attachment Table.
  6. Select the suspect attachment and then locate the PR_ATTACH_METHOD property in the list of properties. Value and SmartView columns display the data. The attachment is a linked attachment if the data matches one of the three values that are listed in the MAPI Flag table that was listed earlier.
For more information about MFCMAPI, visit the following Microsoft webpage:
http://www.codeplex.com/mfcmapi
The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.


Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.


↑ Back to the top

Keywords: kbregistry, kbsurveynew, kbsecurity, kbsecreview, consumeroff2010track, kblangall, kbexpertiseinter, kb, kbmustloc

↑ Back to the top

Article Info
Article ID : 2271150
Revision : 11
Created on : 9/14/2017
Published on : 9/14/2017
Exists online : False
Views : 285