Application Manager and Lumension 4.4 installed on the same computer may cause application crashes

Version 1

    Verified Product Versions

    Application Control 8.9Application Control 8.8Application Control 8.7Application Control 8.6Application Control 8.5Application Control 8.4Application Control 8.3Application Control 8.2Application Control 8.1Application Control 8.0


    Customers with both Application Manager and Lumension Endpoint Security 4.4 SR1 (4.4.1003) installed on a machine may experience application crashes due to access violations (0xc0000005).

    The crashes will usually occur at application start and will only affect applications being elevated by Application Manager.

    Example Application Event Log output:


    Faulting application name: ipconfig.exe,version: 6.1.7600.16385, time stamp: 0x4a5bcd06

    Faulting module name: unknown, version:, time stamp: 0x00000000

    Exception code: 0xc0000005

    Fault offset: 0x000007fffd6c0228

    Faulting process id: 0x1dd8

    Faulting application start time:0x01cdff26f8cad28e

    Faulting application path:C:\windows\system32\ipconfig.exe

    Faulting module path: unknown

    Report Id:37505466-6b1a-11e2-b0e1-005056886b91



    If you capture a crash dump of a faulting process you see that module ‘sxwmon’ is at the top of the stack before the error handling:

    00000000`0018c5d0 000007ff`fd630228ntdll!KiUserExceptionDispatcher+0x2e

    *** ERROR: Module load completed but symbols could not beloaded for sxwmon64.dll

    00000000`0018cb88 00000001`800211e4 0x7ff`fd630228

    00000000`0018cb90 000007fe`fe2e53ad sxwmon64+0x211e4

    00000000`0018cc10 000007fe`fe2caa90shell32!_SHCoCreateInstance+0x209

    00000000`0018cf10 000007fe`fe2adea1 shell32!SHExtCoCreateInstance+0x28

    00000000`0018cf60 000007fe`fe285c64 shell32!DCA_SHExtCoCreateInstance+0x3d

    00000000`0018cfa0 000007fe`fe285b0cshell32!CFSIconOverlayManager::_s_LoadIconOverlayIdentifiers+0x16f

    00000000`0018d570 000007fe`fe285a60 shell32!CFSIconOverlayManager::CreateInstance+0x81

    00000000`0018d5a0 000007fe`fe2a263fshell32!IconOverlayManagerInit+0x33

    The sxwmon64.dll module is part of Lumension Endpoint Security.

    In order to resolve this issue you will need to upgrade Lumension Endpoint Security to at least version 4.4 SR 11 (4.4.2112).