面向RTF文件的Word漏洞分析

Research on Word Vulnerability Analysis for the RTF File

针对Word软件在富文本格式(RTF)文档解析的漏洞利用攻击,通过对Word程序的逆向分析,研究其在RTF文档解析中产生缓冲区溢出漏洞的原理,并提出一种基于指令回溯及特征数据构造的漏洞分析方法.通过该方法分析Word漏洞的触发原因、触发点和触发机制,给出了面向RTF文档的缓冲区溢出漏洞的分析流程.实验测试结果证明:该方法能有效检测出Word的RTF文档解析漏洞.

According to vulnerability exploitation attack of Word software parsing RTF document,this paper studies the principle of buffer overflow vulnerabilities of Word program parsing RTF document by using the reverse analysis of the Word program,and proposes a new vulnerability analysis method based on instruction backtracking and characterization data construction.Through proposed method,this paper analyzes the triggering reason,triggering point and triggering mechanism of Word vulnerability.The analysis process of buffer overflow vulnerabilities for facing RTF document is ob-tained.The Experimental testing results show that this method can effectively detect the RTF document parsing vulnera-bility of word.