18.9.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - wmplayer.exe

Information

This setting determines if recommended EMET mitigations are applied to the following popular software:

7-Zip

Adobe Photoshop

Foxit Reader

Google Chrome

Google Talk

iTunes

Microsoft Live Writer

Microsoft Lync Communicator

Microsoft Photo Gallery

Microsoft SkyDrive

mIRC

Mozilla Firefox

Mozilla Thunderbird

Opera

Pidgin

QuickTime Player

RealPlayer

Safari

Skype

VideoLAN VLC

Winamp

Windows Live Mail

Windows Media Player

WinRAR

WinZip

The recommended state for this setting is: Enabled.

Rationale:

Applying EMET mitigations to popular software packages will help reduce the reliability of exploits that target them.

Impact:

EMET mitigations will be applied to the listed popular software that is installed on the computer.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled:

Computer Configuration\Policies\Administrative Templates\Windows Components\EMET\Default Protections for Popular Software

Note: This Group Policy path does not exist by default. An additional Group Policy template (EMET.admx/adml) is required - it is included with Microsoft Enhanced Mitigation Experience Toolkit (EMET).

Default Value:

User configured.

See Also

https://workbench.cisecurity.org/benchmarks/14249

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SC-39, 800-53|SI-16, CCE|CCE-35476-1, CSCv7|8.3

Plugin: Windows

Control ID: da5b327399461ebfbf687c652a49806f0a33a4b687646b45010745b2f86233c8