Sophos Anti-Virus 3.78 allows remote malicious users to cause a denial of service (infinite loop) via a MIME header that is not properly terminated.