Heap-based buffer overflow in the Sophos Antivirus Library as used by Sophos Antivirus PureMessage MailMonitor and other products allows remote attackers to execute arbitrary code via a Visio file with a crafted sub record length.