The Sasser worm is a family of Windows network worms that spread over the Internet by exploiting the MS04‑011 buffer overflow vulnerability in the LSASS service on unpatched Windows 2000 and XP systems, allowing it to scan for and automatically infect other vulnerable hosts.