Work

Finding the needle in the heap

Year: 2016

Type: conference-paper

Abstract: This paper presents a fully automated technique to find and trigger Use-After-Free vulnerabilities (UAF) on binary code. The approach combines a static analyzer and a dynamic symbolic execution engine. We also introduce several original heuristics for the dynamic symbolic execution part, speeding up the exploration and making this combination effective in practice. The tool we developed is open-source, and it has successfully been applied on real world vulnerabilities. As an example, we detail a proof-of-concept exploit triggering a previously unknown vulnerability on JasPer leading to the CVE-2015-5221.

DOI: 10.1145/3015135.3015137

Authors: Josselin Feist, Laurent Mounier, Sébastien Bardin, Robin David, Marie-Laure Potet

Institutions: Verimag, Université Grenoble Alpes, Université Paris-Saclay

Language: English

Topic: Software Testing and Debugging Techniques

Subfield: Software

Field: Computer Science

Domain: Physical Sciences

Open Access status: green

Funder: Agence Nationale de la Recherche

Award: Binary code analysis for security

OpenAlex ID: W2559804063

FWCI: 0.803

Cites: 51

Cited by: 30

Related to: 10