Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-75269 | ADBP-XI-000280 | SV-89949r1_rule | Low |
Description |
---|
Acrobat provides the ability for the user to store a list of websites with an associated behavior of allow, ask, or block. Websites that are not in this list are unknown. PDF files can contain URLs that will initiate connections to unknown websites in order to share or get information. That access must be restricted. |
STIG | Date |
---|---|
Adobe Acrobat Pro XI Security Technical Implementation Guide | 2017-07-24 |
Check Text ( C-75053r3_chk ) |
---|
Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Adobe Acrobat\11.0\FeatureLockDown\cDefaultLaunchURLPerms\ Value Name: iUnknownURLPerms Type: REG_DWORD Value: 3 If the value for iUnknownURLPerms is not set to “3” and Type is not configured to REG_DWORD or does not exist, this is a finding. |
Fix Text (F-81885r2_fix) |
---|
Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Adobe Acrobat\11.0\FeatureLockDown\cDefaultLaunchURLPerms\ Value Name: iUnknownURLPerms Type: REG_DWORD Value: 3 |