Title

The IE search parameter is not set correctly. (Cat II impact)

Discussion

This parameter ensures automatic searches are not performed from the address bar. When a web site is not found and searching is performed, potentially malicious or unsuited sites may be displayed.

Check Content

Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Microsoft\Internet Explorer\Main Criteria: If the value AutoSearch is 0 or 4, this is not a finding.

Fix Text

Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Microsoft\Internet Explorer\Main Ensure the value AutoSearch is 0 or 4

Additional Identifiers

Rule ID: SV-7341r1_rule

Vulnerability ID: V-7006

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.