locked
Experiences with the Enhanced Mitigation Experience Toolkit (EMET) 5.0. Final version was released on July 31, 2014 RRS feed

  • General discussion

  • What are your first experiences and what are the advantages and / or disadvantages of version 5.0?

    Today Microsoft has released the final version of EMET 5.0, which can be downloaded from here or from the program's download section. More information on this new release are available in the announcement’s blog post. EMET is a customer-driven software, and they are eager to have your feedback!


    W. Spu




    • Edited by W. Spu Saturday, August 9, 2014 10:00 PM
    Thursday, July 31, 2014 7:53 PM

All replies

  • We're so happy that this has been released. 

    Feeback: on Page 24 of the recently released EMET User's Guide, there is still a reference to the Technology Preview:

    "The first step in deploying EMET is to download the EMET 5.0TP MSI."

    

    

    Thursday, July 31, 2014 10:29 PM
  • I have mixed test results....

    On a virtual Windows 7 64-bit system with recommended security settings and popular software profile: IE9 loads very slow and often does not respond. If EAF+ is disabled IE responds better. IE responds good if EAF is also disabled but when I browse to http://www.java.com/nl/download/installed.jsp?detect=jre the browser crashes (even when ASR is disabled). When also Stack Pivot is disabled IE responds quickly again and does not crash. When IE9 is updated to IE11 the problem with very slow loading of the browser (and the not responding) remains. Adobe Reader 11 is also loading slow and is sometimes not responding. With protected view Adobe Reader crashes. The 7-Zip file manager is working normally. Windows media player crashes after a few seconds. (after scanning the network for libraries?)

    On a virtual Windows 7 32-bit system with recommended security settings and popular software profile: IE11 responds somewhat slower. Adobe Reader also responds somewhat slower. With protected view Adobe Reader crashes. The 7-Zip file manager crashes. This also happens with other accounts and with or without administrator rights. Excel starts up but crashes when the application is closed. Windows media player crashes after a few seconds. (after scanning the network for libraries?)

    On a physical laptop with Windows 7 32-bit system with recommended security settings and popular software profile: Most of the applications seems to be running fine although a file open dialog (or even an applications) sometimes takes some time to load for the first time. The 7-Zip file manager crashes although it seemed to be working fine earlier… Windows Media player crashes after a few seconds (after scanning the network for libraries?)

     

    I’m sorry to conclude that EMET 5.0 isn’t running very stable. This is not only my experience but also from other people in other forums. I have reported some issue’s to Microsoft through the EMET connect portal but only received one response until now.


    W. Spu



    • Edited by W. Spu Saturday, August 9, 2014 9:50 PM
    Tuesday, August 5, 2014 10:57 AM
  • If an application crashes because of EAF mitigation there is no EMET entry in syslog.
    Tuesday, August 5, 2014 1:36 PM
  • I was excited to upgrade from EMET 4.1 to EMET 5.0 this week.  Unfortunately, and this may not be so helpful, as I didn't log a lot of specific details, but I've had to roll back to EMET 4.1.  In particular, on my Win7Pro boxes running IE11, IE began loading very slow with EMET5, not an issue at all with EMET4.1.

    One unit that has Trusteer Rapport on it - the browser would crash a lot.  Throw exceptions with Trusteer's software, as well as seeming crashes in MSFT DLLs, as well.  So I've rolled back to EMET 4.1.

    My Win8.1 box seems to perform fine.  So perhaps this performance issue is limited primarily to Win7.  My boxes are fairly generic Win7 images.

    Thursday, August 7, 2014 3:11 PM
  • I read a lot about problems with EMET5 and all with different combinations of programs and protections. With some people a combination gives an problem and with other people the same combination is causing no problems. Overall EMET5 seems to be less stable than EMET4.1u1. Until most problems are fixed I will wait with deploying EMET5 to our clients.

    I recommend everyone to give feedback on the EMET connect portal (and no i'm not a Microsoft employee) but I guess that most of the EMET specialist at Microsoft are also on vacation.


    W. Spu

    Thursday, August 7, 2014 5:25 PM