Sophos Anti-Virus CPIO Archive Parsing Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sophos Anti-Virus. The specific flaw exists in the parsing of CPIO archives. When a long non-null terminated filename is processed by veex.dll, a stack overflow occurs. Exploitation is possible leading to remote code execution running under the SYSTEM context.