Details

*Description*

This policy setting allows you to manage whether pages of the zone may download HTML

fonts. The recommended state for this setting is- Enabled-Disable.

*Rationale*

It is possible that a font could include malformed data that would cause Internet Explorer

to crash when it attempts to load and render the font.

Solution

To implement the recommended configuration state, set the following Group Policy setting
to Enabled.

Computer ConfigurationAdministrative TemplatesWindows ComponentsInternet
ExplorerInternet Control PanelSecurity PageInternet ZoneAllow font downloadsAllow
font downloads

Then set the Allow font downloads option to Disable.

Impact-If you enable this policy setting, HTML fonts can be downloaded automatically. If you
enable this policy setting and Prompt is selected in the drop-down box, users are queried
whether to allow HTML fonts to download. If you disable this policy setting, HTML fonts
are prevented from downloading.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1516

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Windows.

References

• 800-53|SC-18(3)

Source

• Tenable.com/audits