Topics:
Google security researcher releases fuzzer tool for browsers
Google (NASDAQ: GOOG) security researcher Michal Zalewski has announced the release of his fuzzer tool for web browsers in a New Year's Day blog entry. A fuzzer is essentially an application that injects thousands of random or incorrect input in an attempt to crash the targeted software. The idea is that researchers can leverage on the findings obtained in this manner to potentially create security attacks that exploit these bugs.
Microsoft (NASDAQ: MSFT), though, was clearly unhappy with the move to publish the tool, chiefly because it has yet to release patches to immunize its Internet Explorer browser against weaknesses uncovered by the tool. The Redmond-based company says it has requested that Zalewski withhold from releasing his cross-fuzz utility "indefinitely." Zalewski, however, is adamant that he has already submitted a report to Microsoft in July of the problems he uncovered. As it was not followed-up on until his final contact in December, Zalewski says he decided to go ahead with the release of the tool.
For more on this story:
- check out this article at eSecurity Planet
- check out this article at eWeek
- check out this article at Michael Zalewski's Blog
Related Articles:
Computer security forecasts
PandaLabs predicts a grim cybersecurity outlook for 2011
Google ships Chrome 8 browser; usage jumps 9 percent in November
McAfee: Malware at all-time high




Comments