The invention provides a 
detector for binary-code buffer-zone overflow bugs, and a detection method thereof. The 
detector comprises six functional modules, namely a 
debugger module, an input point positioning module, a disassembling module, a 
symbolic execution module, a loop operation analysis module and an intelligent FUZZ test module. Differing from static 
symbolic execution, the detection method dynamically loads programs through the self-developed 
debugger module to synchronously performing 
symbolic execution and single-step practical execution, and then applies a model to solve each difficulty in binary code analysis so as to 
test path coverage and detect overflow bugs in accordance with all 
executable programs of PE format under a Windows platform. The detection can also provide propagation paths of input data and other important information related to bug formation cause while positioning the bugs, only analyzes the selves of the 
executable programs, needs no source codes, is unrelated to the species of source codes and development tools, and is extensive in applicable occasions, so the detection method has good prospects for popularization and application.