A Method of Detecting Stack Overflow Vulnerability of Binary Code of a Component

摘要

Security testing of COM components is a hot yet difficult field in recent years. There are only a few methods of detecting stack overflow vulnerability of a component. This paper presents a method of detecting stack overflow vulnerability of binary code of a component. The method converts the buffer overflow problem into the problem of integer constraints. By scanning the different buffers according to the types of risk function parameters, it first establishes a function library of all risks of.COM component, and then compares the used buffer size and the declared buffer size to identify the stack overflow vulnerability. The result of the experiment shows that the proposed method has desirable results of detecting COM components' stack overflow vulnerability.