Check: WINGE-000100
Windows 2003 DC STIG:
WINGE-000100
(in version v6 r40)
Title
The Enhanced Mitigation Experience Toolkit (EMET) V4.1 Update 1 or later must be installed on the system. (Cat I impact)
Discussion
Attackers are constantly looking for vulnerabilities in systems and applications. The Enhanced Mitigation Experience Toolkit can enable several mechanisms, such as Data Execution Prevention (DEP), Address Space Layout Randomization (ASLR), and Structured Exception Handler Overwrite Protection (SEHOP) on the system and applications adding additional levels of protection.
Check Content
Fix Text
This is applicable to unclassified systems, for other systems this is NA. Install EMET V4.1 Update 1 or later on the system. EMET is available for download from Microsoft. Microsoft support for EMET V4.x ends 9 June 2015. Organizations should plan to update to a supported version.
Additional Identifiers
Rule ID: SV-50948r4_rule
Vulnerability ID: V-39137
Group Title:
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000366 |
Implement the security configuration settings. |
Controls
Number | Title |
---|---|
CM-6 |
Configuration Settings |