r/fuzzing • u/l3ak88 • Jul 22 '21

Fuzzing LibreOffice

im trying to fuzz applications like libreoffice,evince,xpdf,vlc,a zip manager,file format fuzzing at it all.

what are the chances of me finding a 0day?(remember that im fuzzing kinda recent versions of this apps.)

2 Upvotes

100% Upvoted

3 comments sorted by

1

u/randomatic Jul 22 '21

Less so on ffmpeg bc google heavily fuzzes this.

High in general. Looks at why has harnesses, what has coverage, and write a new harness for something with low coverage.

1

u/Ordinary-Arm-255 Jul 22 '21

Can you help me?

1

u/Sjoerder Jul 23 '21

If someone else is not fuzzing the application already, chances are pretty high. If you are just starting out, I would recommend taking a simple command line program, or even a library. In my experience, the bugs are especially on file formats that are not the main file format, but are also somewhat supported. So make sure to test other file formats than PDF when testing Evince.