Detections
Analytics

1.154 WN11-CC-000220

Information

File Explorer heap termination on corruption must be disabled.

GROUP ID: V-253397
RULE ID: SV-253397r958902

Legacy plug-in applications may continue to function when a File Explorer session has become corrupt. Disabling this feature will prevent this.

Solution

The default behavior is for File Explorer heap termination on corruption to be enabled.

To correct this, configure the policy value for

Computer Configuration >> Administrative Templates >> Windows Components >> File Explorer >> 'Turn off heap termination on corruption'

to 'Not Configured' or 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-5, CCI|CCI-002385, Rule-ID|SV-253397r958902_rule, STIG-ID|WN11-CC-000220, Vuln-ID|V-253397

Plugin: Windows

Control ID: 92848406c2f06dde17569078c6345c656c7527f4b949daaeb6061541d4d1c2c0