Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project (.psh) file related to the (1) celln.imagesm.image and (2) celln.sound.file fields.