Index: /CKEditor/trunk/CHANGES.html
===================================================================
--- /CKEditor/trunk/CHANGES.html	(revision 6992)
+++ /CKEditor/trunk/CHANGES.html	(revision 6993)
@@ -92,4 +92,5 @@
 		<li><a href="http://dev.ckeditor.com/ticket/7841">#7841</a> : Deleting a column with a deleted cell in one of the rows not working.</li>
 		<li><a href="http://dev.ckeditor.com/ticket/7944">#7944</a> : Enter key should not split or create new paragraphs inside caption elements.</li>
+		<li><a href="http://dev.ckeditor.com/ticket/7639">#7639</a> : [IE9] Browser might crash when an object is selected in the document.</li>
 		<li>Updated the following language files:<ul>
 			<li><a href="http://dev.ckeditor.com/ticket/7834">#7834</a> : Dutch;</li>
Index: /CKEditor/trunk/_source/plugins/selection/plugin.js
===================================================================
--- /CKEditor/trunk/_source/plugins/selection/plugin.js	(revision 6992)
+++ /CKEditor/trunk/_source/plugins/selection/plugin.js	(revision 6993)
@@ -478,4 +478,11 @@
 
 			editor.selectionChange = checkSelectionChangeTimeout;
+
+			// IE9 might cease to work if there's an object selection inside the iframe (#7639).
+			CKEDITOR.env.ie9Compat && editor.on( 'destroy', function()
+			{
+				var sel = editor.getSelection();
+				sel && sel.getNative().clear();
+			}, null, null, 9 );
 		}
 	});