Heap-based buffer overflow in the xjpegls.dll (aka JLS JPEG-LS or JPEG lossless) format plugin in XnView 1.99 and 1.99.1 allows remote attackers to execute arbitrary code via a crafted JLS image file.