Closed Bug 436568 Opened 12 years ago Closed 7 years ago

[Vista] DEP may impede the browsing experience on Vista

Categories

(Core :: Plug-ins, defect, critical)

x86
Windows Vista
defect
Not set
critical

Tracking

()

RESOLVED INCOMPLETE

People

(Reporter: marcia, Unassigned)

Details

This is reported via Hendrix. I want to get this on the radar since I have seen enough reports of it that I think it may be a potential problem.

STR:
1. Visit a website such as wsj.com, cbs.sportsline.com, the Google pack site.
2. Receive the Data Execution dialog. Firefox closes down.

I have not been able to reproduce this on either machine I have in my lab environment. One is running Vista Ultimate and the other is running Vista business. The hendrix reports I have seen have called out both of those versions specifically.

Some other posts about this issue, which seems to date back to Beta 4:
*http://tech.blorge.com/Structure:%20/2008/03/14/firefox-3-beta-4-crashes-on-google-pack-website/
*http://groups.google.com/group/mozilla.feedback.firefox.prerelease/browse_thread/thread/b0fce5961c612775
And MozillaZine:
<http://forums.mozillazine.org/viewtopic.php?t=660262>
<http://forums.mozillazine.org/viewtopic.php?t=660631>

Unfortunately, there isn't much that Firefox could do about it, as it's just a crash--in this case, probably triggered by a plugin (see bug 427382).
The Google Pack site crash is bug 424158, has steps to reproduce, and is likely caused by the plugin that Google installs.
Many reports here too.
http://forums.mozillazine.org/viewtopic.php?f=38&t=681825&start=0
It's not clear what is causing it.  Sometimes a plugin, sometimes not.  In any case there is no way to know whether it's just a plugin coded in an odd way, or an actual exploit attempt (see bug 427382, comment 21).

What is common to all these reports is that it's difficult to support users properly.  Someone needs to take a serious look at this and report to the community.  At a minimum, information and advice are needed by the community.

Changing to critical.
Severity: normal → critical
Looks like there are at least a couple of other bugs covering this issue
bug 424158
Bug 427382
Bug 440969
Bug 431095
Bug 434432
Bug 421217
Could someone flag this for user-doc-needed if/when we figure out what's causing it?  We're seeing this sometimes on support but right now we have no way to troubleshoot.
Not a shell integration bug... likely a dupe of bug 427382... moving over to core -> plugins for triage.
Component: Shell Integration → Plug-ins
Product: Firefox → Core
QA Contact: shell.integration → plugins
Status: UNCONFIRMED → RESOLVED
Closed: 7 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.