CAJ | 학술논문

针对 Word 软件在富文本格式（RTF）文档解析的漏洞利用攻击，通过对 Word 程序的逆向分析，研究其在 RTF 文档解析中产生缓冲区溢出漏洞的原理，并提出一种基于指令回溯及特征数据构造的漏洞分析方法。通过该方法分析 Word 漏洞的触发原因、触发点和触发机制，给出了面向 RTF 文档的缓冲区溢出漏洞的分析流程。实验测试结果证明：该方法能有效检测出 Word 的 RTF 文档解析漏洞。
침대 Word 연건재부문본격식（RTF）문당해석적루동이용공격，통과대 Word 정서적역향분석，연구기재 RTF 문당해석중산생완충구일출루동적원리，병제출일충기우지령회소급특정수거구조적루동분석방법。통과해방법분석 Word 루동적촉발원인、촉발점화촉발궤제，급출료면향 RTF 문당적완충구일출루동적분석류정。실험측시결과증명：해방법능유효검측출 Word 적 RTF 문당해석루동。
According to vulnerability exploitation attack of Word software parsing RTF document,this paper studies the principle of buffer overflow vulnerabilities of Word program parsing RTF document by using the reverse analysis of the Word program,and proposes a new vulnerability analysis method based on instruction backtracking and characterization data construction.Through proposed method,this paper analyzes the triggering reason,triggering point and triggering mechanism of Word vulnerability.The analysis process of buffer overflow vulnerabilities for facing RTF document is ob-tained.The Experimental testing results show that this method can effectively detect the RTF document parsing vulnera-bility of word.