Research into a heap buffer overflow error in Windows XP version of NetApi32.dll reveals that the code is using a null terminated string copy. The patched version of the same dll shows that the copy code has been replaced by a better function that checks the size of the destination buffer.
How do Worms travel?
Strictly speaking, a computer virus doesn't spread across a network whereas a computer worm can travel from machine to machine. But how do worms move between machines?
A vulnerability with the catchy name of MS08-067 was used by Stuxnet and Conficker to worm themselves across Local Area Networks but how did it work? I spent a reasonable amount of time reverse engineering the vulnerability to discover how it was exploited.
