Detections
Analytics

ADBP-XI-000290 - Adobe Acrobat Pro XI must be configured to block Flash Content.

Information

Flash has a long history of vulnerabilities. Although Flash is no longer provided with Acrobat, if the system has Flash installed, a malicious PDF could execute code on the system. Configuring Flash to run from a privileged location limits the execution capability of untrusted Flash content that may be embedded in the PDF.

Solution

Configure the following registry value:

Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \Software\Policies\Adobe\Adobe Acrobat\11.0\FeatureLockDown\

Value Name: bEnableFlash
Type: REG_DWORD
Value: 0

See Also

https://iasecontent.disa.mil/stigs/zip/U_Adobe_Acrobat_Pro_XI_V1R2_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-18, CAT|II, CCI|CCI-000381, Rule-ID|SV-89953r1_rule, STIG-ID|ADBP-XI-000290, Vuln-ID|V-75273

Plugin: Windows

Control ID: 8e3cc94aa4442030ebd90e53ea1b2adee778e7a4699385ed064d505576f52255