UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Adobe Reader DC must Block Websites.


Overview

Finding ID Version Rule ID IA Controls Severity
V-65767 ARDC-CL-000025 SV-80257r1_rule Medium
Description
Because Internet access is a potential security risk, clicking any link to the Internet poses a potential security risk. Malicious websites can transfer harmful content or silently gather data. Satisfies: SRG-APP-000112, SRG-APP-000206, SRG-APP-000207, SRG-APP-000209, SRG-APP-000210
STIG Date
Adobe Acrobat Reader DC Classic Track Security Technical Implementation Guide 2016-02-09

Details

Check Text ( C-66449r1_chk )
Verify the following registry configuration:

Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\2015\FeatureLockDown\cDefaultLaunchURLPerms

Value Name: iURLPerms
Type: REG_DWORD
Value: 1

If the value for iURLPerms is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding.
Fix Text (F-71837r1_fix)
Configure the following registry value:

Registry Hive: HKEY_LOCAL_MACHINE
Registry Path:
\Software\Policies\Adobe\Acrobat Reader\2015\FeatureLockDown\cDefaultLaunchURLPerms

Value Name: iURLPerms
Type: REG_DWORD
Value: 1