STIGQter: STIG Summary: Adobe Acrobat Reader DC Continuous Track Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Jul 2021:

Adobe Reader DC must block access to Unknown Websites.

DISA Rule

SV-213173r395811_rule

Vulnerability Number

V-213173

Group Title

SRG-APP-000112

Rule Version

ARDC-CN-000030

Severity

CAT II

CCI(s)

CCI-001166 - Identify organization-defined unacceptable mobile code.
CCI-001169 - Prevent the download of organization-defined unacceptable mobile code.
CCI-001170 - Prevents the automatic execution of mobile code in organization-defined software applications.
CCI-001662 - Take organization-defined corrective action when organization-defined unacceptable mobile code is identified.
CCI-001695 - Prevent the execution of organization-defined unacceptable mobile code.

Weight

Fix Recommendation

Configure the following registry value:

Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms

Value Name: iUnknownURLPerms
Type: REG_DWORD
Value: 3

Check Contents

Verify the following registry configuration:

Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms

Value Name: iUnknownURLPerms
Type: REG_DWORD
Value: 3

If the value for iUnknownURLPerms is not set to “3” and Type configured to REG_DWORD or does not exist, then this is a finding.

Adobe Reader DC must block access to Unknown Websites.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key