He would scour the Web sites where computer-security professionals report any new software vulnerabilities they discover.

Normally a single exploit can only take advantage of a specific software vulnerability.

Proactively identify and repair software vulnerabilities reported by security researchers or vendors.

Thus, they are the basis of many software vulnerabilities and can be maliciously exploited.

Uncontrolled format string is a type of software vulnerability, discovered around 1999, that can be used in security exploits.

They typically start by exploiting a software vulnerability (a flaw that allows the software's intended security policy to be violated).

"These few software vulnerabilities account for the majority of successful attacks," the Web site said.

They are thus the basis of many software vulnerabilities and can be maliciously exploited.

Wysopal was instrumental in developing industry guidelines for responsible disclosure of software vulnerabilities.

There are also attacks that exploit software vulnerabilities from both the web browser and operating system.