Researcher finds critical vulnerabilities in Sophos antivirus product