Adobe Acrobat Reader DC Continuous Track Security Technical Implementation Guide

The Adobe Acrobat Reader DC Continuous Track Security Technical Implementation Guide (V2 R1) has 26 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

26STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R1

CurrentPublished Fri Jul 23 2021 What changed in V2R1

Adobe Reader DC must disable the ability to change the Default Handler.

Adobe Acrobat Reader DC Continuous Track Security Technical Implementation Guide

Assessment Title

Rule Text

Adobe Reader DC must disable the ability to change the Default Handler.

Description

Discussion Text

Allowing user to make changes to an application case cause a security risk.

When the Default PDF Handler is disabled, the end users will not be able to change the default PDF viewer.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-213176

Rule

SV-213176r395850_rule

Severity

low

Rule Version

ARDC-CN-000050

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify the following registry configuration:

Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown

Value Name: bDisablePDFHandlerSwitching
Type: REG_DWORD
Value: 1

If the value for bDisablePDFHandlerSwitching is not set to "1" and Type configured to REG_DWORD or does not exist, then this is a finding.

Implementation Procedure

Fix Text

Configure the following registry value:

Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown

Value Name: bDisablePDFHandlerSwitching
Type: REG_DWORD
Value: 1

STIG check 9 of 26 in the Adobe Acrobat Reader DC Continuous Track STIG checklist

← Previous · V-213175Adobe Reader DC must block Flash Content.Next · V-213177 →Adobe Reader DC must disable the Adobe Send and Track plugin for Outlook.