18.9.24.5 Ensure 'Default Protections for Recommended Software' is set to 'Enabled' - WINWORD.EXE

Information

This setting determines if recommended EMET mitigations are applied to the following software:

Adobe Acrobat

Adobe Acrobat Reader

Microsoft Office suite applications

Oracle Java

WordPad

The recommended state for this setting is: Enabled.

Rationale:

Applying EMET mitigations to recommended software will help reduce the reliability of exploits that target them.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled:

Computer Configuration\Policies\Administrative Templates\Windows Components\EMET\Default Protections for Recommended Software

Note: This Group Policy path does not exist by default. An additional Group Policy template (EMET.admx/adml) is required - it is included with Microsoft Enhanced Mitigation Experience Toolkit (EMET).

Impact:

EMET mitigations will be applied to the listed recommended software that is installed on the computer.

Default Value:

User configured.

See Also

https://workbench.cisecurity.org/files/2700

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7(2), CSCv6|8.4

Plugin: Windows

Control ID: 97428933af79afb7731ffae410cda9ccfa4216f1e1783baaaafdba25d7006329