Sophos fixes critical code injection bug under exploit
Briefly