Integer overflow in X MultiMedia System (xmms) 1.2.10 and possibly other versions allows user-assisted remote attackers to execute arbitrary code via crafted header information in a skin bitmap image which triggers memory corruption.