摘要： Fuzzing是一种自动化的漏洞发掘技术。基于Fuzzing的漏洞发掘思想，该文设计并实现了一个针对MP3播放软件的fuzz工具——MP3Fuzz，对现有的从互联网上搜集到的Windows平台下常用的11种MP3播放软件进行了安全测试，发现了4个未公布的安全漏洞。测试结果表明MP3Fuzz的有效性和先进性。

关键词: 漏洞, 漏洞挖掘, Fuzzing技术, MP3播放软件

Abstract: Fuzzing is an automated vulnerability exploiting technique. This paper specifically designs and implementes a MP3Fuzz to test MP3 players based on fuzzing. With MP3Fuzz, it testes 11 popular MP3 players collected from the Internet, and discovers four unreleased vulnerabilities, which indicates the validity and superiority of the MP3Fuzz.

Key words: vulnerability, vulnerability exploiting, Fuzzing, MP3

中图分类号: 

• TP309