Font downloads must be disallowed (Restricted Sites zone).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-46585	DTBI120-IE11	SV-59449r1_rule	DCMC-1	Medium

Description
It is possible that a font could include malformed data that would cause Internet Explorer to crash when it attempts to load and render the font. Downloads of fonts can sometimes contain malicious code. Files should not be downloaded from restricted sites. This policy setting allows you to manage whether pages of the zone may download HTML fonts.

STIG	Date
Microsoft Internet Explorer 11 Security Technical Implementation Guide	2017-02-28

Details

Check Text ( None )
None

Fix Text (F-50355r1_fix)
Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow font downloads' to 'Enabled', and select 'Disable' from the drop-down box.