none
Photoshop.exe crashes in EMET.DLL (EMET 5.2 installed) RRS feed

  • Question

  • Since deploying EMET 5.2 via group policy and taking standard application default values exept for EAF on IE 11 (So IE opens in Windows 10), I have an issue with Photoshop 12.0.4.0 opening on a users Windows 7 Professional workstation.  The event log error is:

    Faulting application name: Photoshop.exe, version: 12.0.4.0, time stamp: 0x4d9d8cbc
    Faulting module name: EMET.DLL, version: 5.2.0.1, time stamp: 0x5503c3e4
    Exception code: 0xc0000005
    Fault offset: 0x00066011
    Faulting process id: 0x2154
    Faulting application start time: 0x01d0df38094e67d3
    Faulting application path: C:\Program Files (x86)\Adobe\Adobe Photoshop CS5\Photoshop.exe
    Faulting module path: C:\Windows\AppPatch\EMET.DLL
    Report Id: 4b0b4387-4b2b-11e5-a484-90b11c6babbe

    What would be the first thing you would change in EMET under the group policy to take off of Photoshop.exe?  Would it be EAF, because that fixed IE 11.  Would it be something else?  There's multiple things it could be, but whats the most common protection that may solve this so I don't spend hours updating group policy, gp refreshes and testing?

    Tuesday, August 25, 2015 4:42 PM

All replies

  • I altered the shortcut on this user's PC to point to the 64-bit version of Photoshop, which is located at:

    C:\Program Files\Adobe\Adobe Photoshop CS5\Photoshop.exe.  It works fine on the 64-bit version on 64-bit Windows 7.

    Both the 32 AND the 64-bit versions of Photoshop 12.0.4 (CS5 with update 4) work no issues with EMET 5.2 in Windows 10.  This is strictly a Photoshop 32-bit in Windows 7 64-bit with EMET 5.2 issue when using the default protections.

    Still wouldn't mind knowing what the first mitigation you would target to remove.

    Tuesday, August 25, 2015 5:25 PM