Research Article

OFFDTAN: A New Approach of Offline Dynamic Taint Analysis for Binaries

Table 3

Program description and evaluation results.

ProgramVersionVulnerabilityCrash AddressCrash InstructionOffset of Taint

Adobe Reader9.3.4CVE-2010-28830x0803DDABcall strcat0x12C
Microsoft Office Excel2003CVE-2011-01040x300DE834rep movs0x300
Firefox3.6.16CVE-2011-00730x1046659Bcall dword ptr [ECX + 70h]0x4A
Microsoft Office Word2003CVE-2012-01580x275C8A0Arep movs0xA0F