Adobe Acrobat Pro XI Security Technical Implementation Guide

The Adobe Acrobat Pro XI Security Technical Implementation Guide (V1 R2) has 26 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

26STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Fri Jan 26 2018

Adobe Acrobat Pro XI Protected Mode must be enabled.

Adobe Acrobat Pro XI Security Technical Implementation Guide

Assessment Title

Rule Text

Adobe Acrobat Pro XI Protected Mode must be enabled.

Description

Discussion Text

Protected Mode is a "sandbox" that is essentially a read-only mode.

When enabled, Acrobat allows the execution environment of untrusted PDF's and the processes the PDF may invoke but also presumes all PDFs are potentially malicious and confines processing to a restricted sandbox.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-75285

Rule

SV-89965r1_rule

Severity

medium

Rule Version

ADBP-XI-001010

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify the following registry configuration:

Using the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Adobe Acrobat\11.0\FeatureLockDown

Value Name: bProtectedMode
Type: REG_DWORD
Value: 1

If the value for bProtectedMode is not set to "1" and Type is not configured to REG_DWORD or does not exist, this is a finding.

Implementation Procedure

Fix Text

Configure the following registry value:

Registry Hive:
HKEY_LOCAL_MACHINE
Registry Path:
\Software\Policies\Adobe\Adobe Acrobat\11.0\FeatureLockDown

Value Name: bProtectedMode
Type: REG_DWORD
Value: 1

STIG check 11 of 26 in the Adobe Acrobat Pro XI STIG checklist

← Previous · V-75281Adobe Acrobat Pro XI periodic downloading of Adobe European certificates must be disabled.Next · V-75287 →Adobe Acrobat Pro XI Protected View must be enabled.