Adobe Acrobat Pro XI Security Technical Implementation Guide

The Adobe Acrobat Pro XI Security Technical Implementation Guide (V1 R2) has 26 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

26STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Fri Jan 26 2018

Adobe Acrobat Pro XI access to websites must be blocked.

Adobe Acrobat Pro XI Security Technical Implementation Guide

Assessment Title

Rule Text

Adobe Acrobat Pro XI access to websites must be blocked.

Description

Discussion Text

PDF files can contain URLs that initiate connections to websites in order to share or get information. Any Internet access introduces a security risk as malicious websites can transfer harmful content or silently gather data.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-75271

Rule

SV-89951r1_rule

Severity

low

Rule Version

ADBP-XI-000285

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify the following registry configuration:

Utilizing the Registry Editor, navigate to the following:
HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Adobe Acrobat\11.0\FeatureLockDown\cDefaultLaunchURLPerms\

Value Name: iURLPerms
Type: REG_DWORD
Value: 1

If the value for iURLPerms is not set to "1" and Type is not configured to REG_DWORD or does not exist, this is a finding.

Implementation Procedure

Fix Text

Configure the following registry value:

Registry Hive:
HKEY_LOCAL_MACHINE
Registry Path:
\Software\Policies\Adobe\Adobe Acrobat\11.0\FeatureLockDown\cDefaultLaunchURLPerms\

Value Name: iURLPerms
Type: REG_DWORD
Value: 1

STIG check 5 of 26 in the Adobe Acrobat Pro XI STIG checklist

← Previous · V-75269Adobe Acrobat Pro XI access to unknown websites must be restricted.Next · V-75273 →Adobe Acrobat Pro XI must be configured to block Flash Content.