Microsoft Security Response Center (MSRC) designed and developed an analysis tool to help determine the vulnerability type and root cause of memory corruption flaws. The tool was built on top of two internally developed tools, namely Debugging Tools for Windows (WinDbg) and Time Travel Debugging (TTD).

WinDbg was created as a Windows debugger that has recently received a user interface makeover, while Time Travel Debugging is an internally developed framework designed to record and replay execution of Windows applications.

VulnScan begins the analysis process from the crash location then progresses to determine the root cause. VulnScan includes support for five different classes of memory corruption issues - Out of bounds read/write, Use after free, Type confusion, Uninitialized memory use and Null/constant pointer dereference.





Post A Comment:

2 comments: