Buffer overflow in xloadimage 4.1 and earlier and xli might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file which triggers the overflow during (1) zoom (2) reduce or (3) rotate operations.