Buffer overflow in Resco Photo Viewer for PocketPC 4.11 and 6.01 as used in mobile devices running Windows Mobile 5.0 2003 and 2003SE allows remote attackers to execute arbitrary code via a crafted PNG image.