IE 10, EMET 4.0, Win7 SP1 kernelbase.dll error

Question

I am really not sure what on my Win 7 SP1 system is causing this issue, but with EMET 3.0 everything runs fine, when I upgrade it to EMET 4.0 it initiallly does not show anything "Running EMET" even though it has settings from a large number of
programs via GPO. If I manually add IE to the list it suddenly starts to recognize that it is protecting programs that it is configured to protect, but IE crashes creating this Event Log:
Faulting application name: IEXPLORE.EXE, version: 10.0.9200.16660, time stamp: 0x51f1c5f3
Faulting module name: KERNELBASE.dll, version: 6.1.7601.18015, time stamp: 0x50b83c8a
Exception code: 0xe06d7363
Fault offset: 0x0000c41f
Faulting process id: 0x3184
Faulting application start time: 0x01cebae8faca6d78
Faulting application path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report Id: d7d24822-26df-11e3-a425-02d0bbf30701
There was some suggestions that Sophos Antivirus's Buffer Overflow protection might not be compatible with EMET 4.0, but disabling that feature in Sophos has not helped. 

Answer 1

I recently downloaded the EMET 5.0 Technical Preview 2 and encountered similar results.
With all EMET protections enabled and Sophos Endpoint 10.3 running, IE would 'crash' nearly instantaneously. I found corollary Events (in this case, from Source: Sophos) stating:
Process "C:\Program Files (x86)\Internet Explorer\iexplore.exe" exhibiting suspicious behavior pattern 'Buffer Overflow'. Operation suspended.
Removing all EMET protections (with no other chnages) allowed IE to launch successfully again.
Side-note: I also noticed Events logged at a similar time, suggesting DistributedCOM delays: "The server {D5E8041D-920F-45E9-B8FB-B1DEB82C6E5E} did not register with DCOM within the required timeout".
Bryan Dady System Center Architect Denali Advanced Integration a division of 3MD, Inc. www.denaliai.com [email protected]