Application Manager and Lumension 4.4 installed on the same computer may cause application crashes

Version 1

    Verified Product Versions

    AppSense Application Manager 8.9AppSense Application Manager 8.8AppSense Application Manager 8.7AppSense Application Manager 8.6AppSense Application Manager 8.5AppSense Application Manager 8.4AppSense Application Manager 8.3AppSense Application Manager 8.2AppSense Application Manager 8.1AppSense Application Manager 8.0

    Introduction

    Customers with both Application Manager and Lumension Endpoint Security 4.4 SR1 (4.4.1003) installed on a machine may experience application crashes due to access violations (0xc0000005).

    The crashes will usually occur at application start and will only affect applications being elevated by Application Manager.

    Example Application Event Log output:

     

    Faulting application name: ipconfig.exe,version: 6.1.7600.16385, time stamp: 0x4a5bcd06

    Faulting module name: unknown, version:0.0.0.0, time stamp: 0x00000000

    Exception code: 0xc0000005

    Fault offset: 0x000007fffd6c0228

    Faulting process id: 0x1dd8

    Faulting application start time:0x01cdff26f8cad28e

    Faulting application path:C:\windows\system32\ipconfig.exe

    Faulting module path: unknown

    Report Id:37505466-6b1a-11e2-b0e1-005056886b91

     

    Detail

    If you capture a crash dump of a faulting process you see that module ‘sxwmon’ is at the top of the stack before the error handling:

    00000000`0018c5d0 000007ff`fd630228ntdll!KiUserExceptionDispatcher+0x2e

    *** ERROR: Module load completed but symbols could not beloaded for sxwmon64.dll

    00000000`0018cb88 00000001`800211e4 0x7ff`fd630228

    00000000`0018cb90 000007fe`fe2e53ad sxwmon64+0x211e4

    00000000`0018cc10 000007fe`fe2caa90shell32!_SHCoCreateInstance+0x209

    00000000`0018cf10 000007fe`fe2adea1 shell32!SHExtCoCreateInstance+0x28

    00000000`0018cf60 000007fe`fe285c64 shell32!DCA_SHExtCoCreateInstance+0x3d

    00000000`0018cfa0 000007fe`fe285b0cshell32!CFSIconOverlayManager::_s_LoadIconOverlayIdentifiers+0x16f

    00000000`0018d570 000007fe`fe285a60 shell32!CFSIconOverlayManager::CreateInstance+0x81

    00000000`0018d5a0 000007fe`fe2a263fshell32!IconOverlayManagerInit+0x33

    The sxwmon64.dll module is part of Lumension Endpoint Security.

    In order to resolve this issue you will need to upgrade Lumension Endpoint Security to at least version 4.4 SR 11 (4.4.2112).