Alex Wheeler has reported a vulnerability in Sophos Anti-Virus, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error in veex.dll when parsing Visio files and can be exploited to cause a heap-based buffer overflow via a specially crafted Visio file.

Successful exploitation allows execution of arbitrary code.

Solution
The vendor has issued updated versions (see patch matrix in the vendor's advisory).

Provided and/or discovered by
Alex Wheeler

Changelog
Further details available to Secunia VIM customers

Original Advisory
Sophos:
http://www.sophos.com/support/knowledgebase/article/3409.html

Rem0te:
http://www.rem0te.com/public/images/sophos.pdf

Deep Links
Links available to Secunia VIM customers