Search method for format string vulnerabilities
I.A. Vakhrushev, V. V. Kaushan, Vartan Andronikovich Padaryan, Andrey Fedotov · Proceedings of the Institute for System Programming of RAS · 2015
In this paper search method for format string vulnerabilities is presented. The method is based on dynamic analysis and symbolic execution. It is applied to program binaries, without requiring debug information. We present a tool implementing this method. We have used this tool to detect known vulnerabilities in Linux programs.