Windows 7: Security Researcher Releases Effective Browser Fuzzing Tool

A Google security researcher publicly released a self-made fuzzing tool that so far helped uncover nearly a hundred bugs in all major browsers.



Fuzzing is a software testing technique which involves serving malformed input to an interpreter or parser with the purpose of triggering crashes.

Many of these crashes can be the result of stability problems and therefore nothing more than simple denial of service conditions.

However, in other cases, they can reveal much more serious memory issues that can be exploited to execute arbitrary code on the underlying systems.

The new cross_fuzz tool released by reputed Google security engineer Michal Zalewski tests the Document Object Model (DOM) bindings in browsers.