Adobe Reader DC must disable Service Upgrades.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-65797	ARDC-CL-000120	SV-80287r1_rule		Low

Description
By default, Adobe online services are tightly integrated into Adobe Reader DC. Disabling Service Upgrades disables both updates to the product's web-plugin components as well as all services without exception, including any online sign-in screen.

STIG	Date
Adobe Acrobat Reader DC Classic Track Security Technical Implementation Guide	2018-03-14

Details

Check Text ( C-66479r1_chk )
Verify the following registry configuration: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\2015\FeatureLockDown\cServices Value Name: bUpdater Type: REG_DWORD Value: 0 If the value for bUpdater is not set to “0” and Type configured to REG_DWORD or does not exist, then this is a finding.

Check Text ( C-66479r1_chk )

Verify the following registry configuration:

Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created.

Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\2015\FeatureLockDown\cServices

Value Name: bUpdater
Type: REG_DWORD
Value: 0

If the value for bUpdater is not set to “0” and Type configured to REG_DWORD or does not exist, then this is a finding.

Fix Text (F-71867r1_fix)
Configure the following registry value: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\2015\FeatureLockDown\cServices Value Name: bUpdater Type: REG_DWORD Value: 0