The "Turn off Data Execution Prevention for Explorer" machine setting should be configured correctly.
[enabled/disabled]
Computer Configuration\Administrative Templates\Windows Components\Windows Explorer\Turn off Data Execution Prevention for Explorer
oval:org.secpod.oval:def:8916
SCAP Repo OVAL Definition
2013-01-21