Buffer overflow in NScripter before 3.00 allows remote attackers to execute arbitrary code via crafted save data.