Abstract: An object code based dynamic testing framework is presented which supports several methods of testing data constructions and has the exception monitoring and automatic analyzing module.Following the framework，the prototype system DT is implemented which can use execution parameter input and fault injection methods to test the security of software that deals with file format.To validate the availability of DT system，it can be tested with the recent years’ opened vulnerabilities of MS office software.The experiment result shows that these vulnerabilities can be found by DT.