dslreports logo
 
    All Forums Hot Topics Gallery
spc
Search similar:


uniqs
2621
redwolfe_98
Premium Member
join:2001-06-11

1 edit

2 recommendations

redwolfe_98

Premium Member

MS EMET 5.0 Updated

a new version of MS's "EMET" has been released, build 5.1..

it is important to update EMET, if you use it, because there is a conflict between EMET 5.0 and the november-updates for IE 11, which will be released tomorrow..

»www.zdnet.com/microsoft- ··· 0035626/

»blogs.technet.com/b/srd/ ··· ble.aspx

StuartMW
Premium Member
join:2000-08-06

StuartMW

Premium Member

Enhanced Mitigation Experience Toolkit 5.1

»www.microsoft.com/en-us/ ··· id=43714
85160670 (banned)
"If U know neither the enemy nor yoursel
join:2013-09-17
Edmonton, AB

85160670 (banned) to redwolfe_98

Member

to redwolfe_98
THX & ACK ...... guys for the update & the LINK RUN smoothly, like always I do clean install !

StuartMW
Premium Member
join:2000-08-06

StuartMW

Premium Member

said by 85160670:

...like always I do clean install !

Thanks for reminding me.

This version (5.1) does not overwrite the previous one (5.0). If you uninstall 5.0 (a good idea) you should export it's settings first. I found that 5.1 did not retain my customized 5.0 settings. I had to import my saved 5.0 ones.
85160670 (banned)
"If U know neither the enemy nor yoursel
join:2013-09-17
Edmonton, AB

85160670 (banned)

Member

U R welcome & I set my rules too {{{ SMILE }}} THX again for the LINK.

therube
join:2004-11-11
Randallstown, MD

therube to redwolfe_98

Member

to redwolfe_98
> there is a conflict between EMET 5.0 and the november-updates for IE 11

So if we didn't happen to read this post or the technet blurb, just what would happen? IE11 would update & break? The IE11 update would not install, stating that EMET 5.1 was a prerequisite? Or...?

(I had to look to see what version of IE I had installed. 11.)

StuartMW
Premium Member
join:2000-08-06

StuartMW to redwolfe_98

Premium Member

to redwolfe_98
FYI Firefox 33.1 seems* to load/perform more slowly after installing EMET 5.1.

This was the case before (and after) installing todays other updates (Flash, Windows etc).

* I haven't had a chance to look into this yet.

siljaline
I'm lovin' that double wide
Premium Member
join:2002-10-12
Montreal, QC

siljaline to redwolfe_98

Premium Member

to redwolfe_98
Also here:
»www.cso.com.au/article/5 ··· gations/
scelli (banned)
Four More Years!
join:1999-08-07
FLOT/FEBA

scelli (banned) to redwolfe_98

Member

to redwolfe_98
said by redwolfe_98:

...because there is a conflict between EMET 5.0 and the november-updates for IE 11, which will be released tomorrow.

Any word whether this conflict also exists with prior versions? I'm using EMT 4.1 Update 1 with IE 11 on both a desktop (Win 7 Pro x64) and laptop (Win 7 Home Premium x64).

TIA!

StuartMW
Premium Member
join:2000-08-06

StuartMW

Premium Member

No conflicts that I know of.

FYI EMET 4.1 was the last to run on XP.
scelli (banned)
Four More Years!
join:1999-08-07
FLOT/FEBA

scelli (banned)

Member

said by StuartMW:

No conflicts that I know of.

FYI EMET 4.1 was the last to run on XP.

Thanks!

siljaline
I'm lovin' that double wide
Premium Member
join:2002-10-12
Montreal, QC

siljaline to scelli

Premium Member

to scelli
Complete list of changes to EMET:
»support.microsoft.com/kb/3015976

Chubbzie
join:2014-02-11
Greenville, NC
Hitron CDA3
(Software) OpenBSD + pf

Chubbzie to StuartMW

Member

to StuartMW
said by StuartMW:

FYI EMET 4.1 was the last to run on XP.

StuartMW See Profile, fortunately that is incorrect. Just installed 5.1 on a WinXP Pro x64 machine.

StuartMW
Premium Member
join:2000-08-06

StuartMW

Premium Member

said by Chubbzie:

StuartMW See Profile, fortunately that is incorrect. Just installed 5.1 on a WinXP Pro x64 machine.

Hmmm, you should tell Microsoft
quote:
EMET 5.1 supports the following operating systems and service pack levels:

Client Operating Systems
• Windows Vista Service Pack 2
• Windows 7 Service Pack 1
• Windows 8
• Windows 8.1

Server Operation Systems
• Windows Server 2003 Service Pack 2
• Windows Server 2008 Service Pack 2
• Windows Server 2008 R2 Service Pack 1
• Windows Server 2012
• Windows Server 2012 R2

Fickey
Terrorists target your backbone
join:2004-05-31

Fickey

Member

Yah, I just installed EMET 5.1 on a 32 bit XP Pro SP3 box, too. Of course, I'm not smart enough to know if it's actually working!

StuartMW
Premium Member
join:2000-08-06

StuartMW

Premium Member

Just installed EMET 5.1 on my XP SP3 32-bit box too. It seems to be working fine.

Evidently to Microsoft "support" doesn't mean it won't work.

Exidor
Premium Member
join:2001-05-04

Exidor to redwolfe_98

Premium Member

to redwolfe_98
On my Win 7x64 system with the EMET 5.1 update, Firefox 33.1 does indeed load much slower now.

As a test, I removed the "xul.dll" module from EAF+ protection and FF loads much faster. I don't know if the trade-off is appropriate though from a security standpoint.

EMET mitigations guidelines

»support.microsoft.com/kb/2909257

When EMET mitigations are applied to certain software or certain kinds of software, compatibility issues may occur because the protected software behaves similarly to how an exploit would behave. This article describes the kind of software that usually presents compatibility issues with EMET’s mitigations and a list of products that exhibited compatibility issues with one or more of the mitigations that are offered by EMET.

The above article does not mention Firefox specifically but at the KB page [»support.microsoft.com/kb ··· 3015976] it states the EMET 5.1 update

Addresses application compatibility issues between EAF+ and several applications, such as Internet Explorer, Adobe Reader, Adobe Flash, and Mozilla Firefox.

StuartMW
Premium Member
join:2000-08-06

StuartMW

Premium Member

said by Exidor:

On my Win 7x64 system with the EMET 5.1 update, Firefox 33.1 does indeed load much slower now.

Thanks for the info. I've been too busy updating software today to take a look.

It seems every man and his dog releases updates on "Patch Tues" these days.
StuartMW

1 edit

StuartMW

Premium Member

I'm getting the
quote:
Entry Point Not Found, The procedure entry point fopen_s could not be found in the dynamic library msvcrt.dll.
error on apps on WinXP SP3 as discussed in this thread

»www.wilderssecurity.com/ ··· -2426312

Apparently 5.0 works ok.

Evidently Microsoft is right: v5.1 is not supported (but installs ok) on WinXP.

WildByDesign
join:2014-09-05
Canada

2 recommendations

WildByDesign to StuartMW

Member

to StuartMW
said by StuartMW:

FYI Firefox 33.1 seems* to load/perform more slowly after installing EMET 5.1.

The fix for the slow Firefox issue (regarding EMET 5 and 5.1) is simply to disable SEHOP mitigation, or go back to EMET 4.1 Update 1. Obviously there is a slight security trade off. However, I would still have say 90% of mitigations enabled then none at all, just a made up example.

StuartMW
Premium Member
join:2000-08-06

StuartMW

Premium Member

said by WildByDesign:

The fix for the slow Firefox issue (regarding EMET 5 and 5.1) is simply to disable SEHOP mitigation...

Thanks. I won't be able to mess with EMET until later today (RL is interferring )

Chubbzie
join:2014-02-11
Greenville, NC
Hitron CDA3
(Software) OpenBSD + pf

Chubbzie to StuartMW

Member

to StuartMW
said by StuartMW:

Evidently Microsoft is right: v5.1 is not supported (but installs ok) on WinXP.

Yep, not officially supported by MS, it is XP after all. After configuring my 5.1 yesterday I've had no problems so far.
Fickey
Terrorists target your backbone
join:2004-05-31

Fickey to StuartMW

Member

to StuartMW
said by StuartMW:

I'm getting the

quote:
Entry Point Not Found, The procedure entry point fopen_s could not be found in the dynamic library msvcrt.dll.
error on apps on WinXP SP3...

I just started getting that, too. I thought msvcrt.dll must have been replaced, but my meager detective skills suggest it wasn't. Oh well.

StuartMW
Premium Member
join:2000-08-06

StuartMW to Chubbzie

Premium Member

to Chubbzie
said by Chubbzie:

....I've had no problems so far.

I'd try running any apps protected by EMET (i.e. in it's list) if you haven't already done so.

Chubbzie
join:2014-02-11
Greenville, NC
Hitron CDA3
(Software) OpenBSD + pf

Chubbzie

Member

said by StuartMW:

I'd try running any apps protected by EMET

Strange, I did that earlier, actually went down the list and opened each app listed. Wonder if it has to do with running the x64 version?

StuartMW
Premium Member
join:2000-08-06

StuartMW

Premium Member

said by Chubbzie:

Wonder if it has to do with running the x64 version?

Probably. I think the system (and other) libraries (DLL's) are different. The mitigation methods are probably slightly different too.

I've never actually seen/used XP 64-bit.
Fickey
Terrorists target your backbone
join:2004-05-31

Fickey

Member

Here's an EMET 5.0 installer if anyone with XP wants it:
»www.wilderssecurity.com/ ··· -2426777
redwolfe_98
Premium Member
join:2001-06-11

redwolfe_98

Premium Member

EMET 5.1 is compatible with windows xp.. MS says it is compatible with "windows server 2003" which means it is compatible with windows xp.. the difference is that "windows server 2003" is still supported by microsoft, so MS mentions it as a supported OS..

StuartMW
Premium Member
join:2000-08-06

StuartMW

Premium Member

Ok, I just unistalled 5.1 from my XP SP3 32-bit system and installed 5.0. That seems to be working without issues.

If 5.1 will work (not just install) on XP SP3 32-bit someone else will have to figure it out and post a solution.
redwolfe_98
Premium Member
join:2001-06-11

3 edits

redwolfe_98 to scelli

Premium Member

to scelli
here is an email address for feedback on EMET:

emet_feedback @ microsoft.com

if EMET 5.1 is causing problems, let the EMET team know..