Check: ADBP-XI-000275
Adobe Acrobat Pro XI STIG:
ADBP-XI-000275
(in versions v1 r2 through v1 r1)
Title
Adobe Acrobat Pro XI PDF file attachments must be blocked. (Cat II impact)
Discussion
Acrobat Pro allows for files to be attached to PDF documents. Attachments represent a potential security risk because they can contain malicious content, open other dangerous files, or launch applications. This feature prevents users from opening or launching file types other than PDF or FDF and disables the menu option to re-enable.
Check Content
Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Adobe Acrobat\11.0\FeatureLockDown Value Name: iFileAttachmentPerms Type: REG_DWORD Value: 1 If the value for iFileAttachmentPerms is not set to “1” and Type is not configured to REG_DWORD or does not exist, this is a finding.
Fix Text
Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Adobe Acrobat\11.0\FeatureLockDown Value Name: iFileAttachmentPerms Type: REG_DWORD Value: 1
Additional Identifiers
Rule ID: SV-89947r1_rule
Vulnerability ID: V-75267
Group Title: SRG-APP-000141
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000381 |
The organization configures the information system to provide only essential capabilities. |
Controls
Number | Title |
---|---|
CM-7 |
Least Functionality |