Adobe Acrobat Reader DC Continuous Track Security Technical Implementation Guide

The Adobe Acrobat Reader DC Continuous Track Security Technical Implementation Guide (V2 R1) has 26 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

26STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R1

CurrentPublished Fri Jul 23 2021 What changed in V2R1

Adobe Reader DC must block access to Unknown Websites.

Adobe Acrobat Reader DC Continuous Track Security Technical Implementation Guide

Assessment Title

Rule Text

Adobe Reader DC must block access to Unknown Websites.

Description

Discussion Text

Because Internet access is a potential security risk, clicking any unknown website link to the Internet poses a potential security risk.

Malicious websites can transfer harmful content or silently gather data.

Satisfies: SRG-APP-000112, SRG-APP-000206, SRG-APP-000207, SRG-APP-000209, SRG-APP-000210

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-213173

Rule

SV-213173r395811_rule

Severity

medium

Rule Version

ARDC-CN-000030

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify the following registry configuration:

Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms

Value Name: iUnknownURLPerms
Type: REG_DWORD
Value: 3

If the value for iUnknownURLPerms is not set to "3" and Type configured to REG_DWORD or does not exist, then this is a finding.

Implementation Procedure

Fix Text

Configure the following registry value:

Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms

Value Name: iUnknownURLPerms
Type: REG_DWORD
Value: 3

STIG check 6 of 26 in the Adobe Acrobat Reader DC Continuous Track STIG checklist

← Previous · V-213172Adobe Reader DC must Block Websites.Next · V-213174 →Adobe Reader DC must prevent opening files other than PDF or FDF.