MP3 Vulnerability Exploiting Technique Based on Fuzzing

doi:10.3969/j.issn.1000-3428.2007.24.055

Computer Engineering ›› 2007, Vol. 33 ›› Issue (24): 158-160. doi: 10.3969/j.issn.1000-3428.2007.24.055

• Security Technology • Previous Articles Next Articles

MP3 Vulnerability Exploiting Technique Based on Fuzzing

WEI Yu-hao, ZHANG Yu-qing

National Computer Network Intrusion Protection Center, Graduate School, Chinese Academy of Sciences, Beijing 100043

Received:1900-01-01 Revised:1900-01-01 Online:2007-12-20 Published:2007-12-20

基于Fuzzing的MP3播放软件漏洞发掘技术

魏瑜豪，张玉清

中国科学院研究生院国家计算机网络入侵防范中心，北京 100043

Abstract

Abstract: Fuzzing is an automated vulnerability exploiting technique. This paper specifically designs and implementes a MP3Fuzz to test MP3 players based on fuzzing. With MP3Fuzz, it testes 11 popular MP3 players collected from the Internet, and discovers four unreleased vulnerabilities, which indicates the validity and superiority of the MP3Fuzz.

Key words: vulnerability, vulnerability exploiting, Fuzzing, MP3

摘要： Fuzzing是一种自动化的漏洞发掘技术。基于Fuzzing的漏洞发掘思想，该文设计并实现了一个针对MP3播放软件的fuzz工具——MP3Fuzz，对现有的从互联网上搜集到的Windows平台下常用的11种MP3播放软件进行了安全测试，发现了4个未公布的安全漏洞。测试结果表明MP3Fuzz的有效性和先进性。

关键词: 漏洞, 漏洞挖掘, Fuzzing技术, MP3播放软件

CLC Number:

TP309

WEI Yu-hao; ZHANG Yu-qing. MP3 Vulnerability Exploiting Technique Based on Fuzzing[J]. Computer Engineering, 2007, 33(24): 158-160.

魏瑜豪;张玉清. 基于Fuzzing的MP3播放软件漏洞发掘技术[J]. 计算机工程, 2007, 33(24): 158-160.

/ / Recommend / Download Citations

URL: http://www.ecice06.com/EN/10.3969/j.issn.1000-3428.2007.24.055

http://www.ecice06.com/EN/Y2007/V33/I24/158

[1]	ZHANG Liqun, PAN Zulie, HUANG Hui, WANG Ruipeng, LI Yang. Research on Automatic Verification Method of Tcache Poisoning Heap Vulnerability Based on Symbolic Execution [J]. Computer Engineering, 2023, 49(6): 24-33.
[2]	GU Yunjie, WU Changhe, WU Qing, ZHANG Wei, Lü Tianhang, HU Qi, SONG Xiaobin, YAN Jiyu. Cascade Vulnerability Scanning Engine Deployment Strategy for Delay Optimization [J]. Computer Engineering, 2023, 49(3): 161-167,176.
[3]	LI Minglei, LU Yuliang, HUANG Hui, ZHU Kailong. Guided Grey-Box Fuzzing Test Method Combining Distance and Weight [J]. Computer Engineering, 2021, 47(3): 147-154.
[4]	WANG Hui, ZHAO Ya, ZHANG Juan, LIU Kun. Research on Attack Path Prediction Based on PANAG Model [J]. Computer Engineering, 2020, 46(9): 154-162.
[5]	DAI Wei, LU Yuliang, ZHU Kailong. Directed Grey-box Fuzzing Test Technology Combining Mixed Symbolic Execution [J]. Computer Engineering, 2020, 46(8): 190-196.
[6]	OUYANG Hengyi, XIONG Yan, HUANG Wenchao. A Formal Modeling and Verification Method for Token Smart Contract [J]. Computer Engineering, 2020, 46(10): 41-45,51.
[7]	ZHANG Wanying, CAO Xiaomei, CHEN Wei. Solution for Environment Interaction Problem in Whitebox Fuzz Testing [J]. Computer Engineering, 2020, 46(1): 216-221.
[8]	WANG Hui, LOU Yalong, DAI Tianwang, RU Xinxin, LIU Kun. Vulnerability Evaluation Algorithm Based on BNAG Model [J]. Computer Engineering, 2019, 45(9): 128-135,142.
[9]	LIU Zhihao, SUN Xiaoshan, ZHANG Yang. Fuzzy Testing of Language Interpreter Based on Improved PCFG [J]. Computer Engineering, 2019, 45(8): 22-24,30.
[10]	LIAO Fangyuan, GAN Zhiwang. Vulnerability Analysis and Detection of Android System Signature [J]. Computer Engineering, 2019, 45(8): 25-30.
[11]	ZHOU Weiping, YANG Weiyong, WANG Xuehua, MAO Bing. Research on Penetration Testing Tool for Industrial Control System [J]. Computer Engineering, 2019, 45(8): 92-101.
[12]	HUANG He, CHEN Jun, DENG Haojiang. Fuzzy Testing Algorithm for Modbus/TCP Based on Recurrent Neural Networks [J]. Computer Engineering, 2019, 45(7): 164-169.
[13]	XIA Zhiyang, YI Ping, YANG Tao. Static Vulnerability Detection Based on Neural Network and Code Similarity [J]. Computer Engineering, 2019, 45(12): 141-146.
[14]	CHEN Lu,LIU Xing,CHEN Mu,LI Nige,DAI Zaojian. Scalable Security Evaluation Model of Mobile Application Based on Graph [J]. Computer Engineering, 2018, 44(5): 78-82.
[15]	LIU Chuang,LÜ Na,CHEN Kefan,ZHANG Bushuo,CAO Fangbo. An Unmanned Aerial Vehicle Relay Network Deployment Strategy for Aeronautic Swarm [J]. Computer Engineering, 2018, 44(5): 107-112,123.

Please choose a citation manager

Content to export

MP3 Vulnerability Exploiting Technique Based on Fuzzing

基于Fuzzing的MP3播放软件漏洞发掘技术

PDF

Knowledge

Cited

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

Comments

模态框（Modal）标题

Please choose a citation manager

Content to export

MP3 Vulnerability Exploiting Technique Based on Fuzzing

基于Fuzzing的MP3播放软件漏洞发掘技术

PDF

Knowledge

Cited

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

Comments