Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability


Sophos AntiVirus Engine is vulnerable to a Memory Corruption vulnerability
when scanning malformed CHM archives.

This memory corruption vulnerability can be triggered when Sophos
Antivirus engine scans a malformed CHM file which has a large name length
specified in a CHM chunk header.