519707 - Silverlight Crash [@ coreclr@0xa075b ] (MSRC [9504jh])

Status: RESOLVED FIXED

(Plugins Graveyard :: Silverlight (Microsoft), defect)

Description

[Carsten Book [:Tomcat]]

Steps to reproduce:
-> Firefox 3.5.3 Build (also crashes Safari)
-> Make sure you have Silverlight for Mac installed !!
-> Load http://www.microsoft.com/germany/kundenreferenzen/default.aspx?id=586305&qu=&industry=18&page=3
--> Crashes on load

Silverlight Plug-In

    File name: Silverlight.plugin
    3.0.40818.0

http://crash-stats.mozilla.com/report/index/b9c43766-b0f7-4b36-bdba-1fae22090930

seems to be a Mac only Problem.

Filing as Security Bug don't know if this is exploitable

Comment 1

[Carsten Book [:Tomcat]]

This Site crash also Safari and 1.9.0 Builds - Opera does not crash, but also does not display the Site with Silverlight installed .

Also when you disable this Plugin in Firefox and you load the MS Page, Firefox does not crash - if you enable the Plugin and load the Site, Firefox crash on load again, so definitely a issue with Silverlight.

Also i have saved the Webpage locally, but i'm only able to crash on the live site, not on the local copy :/

Comment 2

[Jesse Ruderman]

Assuming the "crash address" is correct, this is sg:critical.  The crash address matches the top of the stack, indicating a jump to a non-mapped address.

Comment 3

[Jesse Ruderman]

CCing some Silverlight people.

Comment 4

[Carsten Book [:Tomcat]]

(In reply to comment #3)
> CCing some Silverlight people.

also sent mail to [e-mail] today.

Comment 5

[Johnny Stenback (:jst)]

Looks like entirely silverlight's bug, I doubt there's anything we can do about this. Not blocking 1.9.2.

Comment 6

[Carsten Book [:Tomcat]]

as reference crash stats have this crash signature 185 times in the last 4 weeks: 

http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=exact&query=coreclr%400xa075b&date=&range_value=4&range_unit=weeks&do_query=1&signature=coreclr%400xa075b

Comment 7

[Carsten Book [:Tomcat]]

talked with Microsoft today and this will be fixed in Silverlight 4 (scheduled for April 2010)

Comment 8

[chris hofmann]

6-12 crashes per day nov-mid dec 2009, but still holding at 0-2 crashes per day from jan-may this year.

sounds like the update for this has moved to mid-august.

Comment 9

[Carsten Book [:Tomcat]]

(In reply to comment #8)
> sounds like the update for this has moved to mid-august.

yeah advisory is scheduled for next patchday (9th August)

Comment 10

[Carsten Book [:Tomcat]]

and its http://www.microsoft.com/technet/security/bulletin/MS10-060.mspx

Comment 11

[Carsten Book [:Tomcat]]

-> fixed in silverlight (see advisory)