locked
EMET 5.5 GUI crashes after applying KB3140410 (MS16-031) on Windows 7 (SP1) x64. RRS feed

  • Question

  • Hi there,

    Our workstation users do not have admin rights. We must enter admin creds to open EMET GUI. EMET 5.5 GUI crashes on systems running kernelbase.dll v 6.1.7601.19160, which seems to have been introduced by the abovesaid bulletin that addresses a vulnerability with elevation of privilege.

    ---------------------------------------------------------------------------------------

    Event id 1000

    Faulting application name: EMET_GUI.exe, version 5.5.5871.31892

    Faulting module name KERNELBASE.DLL, version: 6.1.7601.19160

    Exception code: 0xe0434352

    Faulting application path: c:\program files (x86)\emet 5.5\emet_gui.exe

    Faulting module path: c:\windows\system32\kernelbase.dll

    ----------------------------------------------------------------------------------------------

    On systems running older kernelbase.dll v 6.1.7601.18939, EMET GUI opens fine.

    Apart from not applying this security update, is there a workaround? Wait for EMET 5.6?

    Other aspects of EMET seem to be functioning fine. 

    -RG

    UPDATE: The April security updates fixed the issue. GUI opens now.

    • Edited by Rama G Friday, April 15, 2016 12:04 AM Found a solution.
    Thursday, April 14, 2016 5:04 AM

All replies

  • I'm seeing the same issue. If I manually create the reg key HKEY_CURRENT_USER\Software\Microsoft\EMET the Gui loads.
    • Proposed as answer by Bill__V Thursday, April 14, 2016 8:30 PM
    Thursday, April 14, 2016 7:42 PM