CVE-2005-3178: Xli

Medium severity, CVSS 5.1. EPSS: 4% chance of exploitation in the next 30 days.

Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during (1) zoom, (2) reduce, or (3) rotate operations.

Affected products

• Xli Xli: any version
• Xloadimage Xloadimage: up to and including 4.1

Published 2005-10-07. Last modified 2026-06-16.