Look at this video analyzing a Microsoft patch to see what the original bug was. (I found this on slashdot.)
I went through these slides.
The slides are based on notes from Stanford:
