CVE-2004-1289

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 14.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-01-10 · updated 2026-06-16

Description

Multiple buffer overflows in (1) the getline function in pcalutil.c and (2) the get_holiday function in readfile.c for pcal 4.7.1 allow remote attackers to execute arbitrary code via a crafted calendar file.

Affected products

Pcal: 4.1.0, 4.3.0, 4.5.0, 4.6.0, 4.7.0, 4.7.1

References

http://tigger.uic.edu/~jlongs2/holes/pcal.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/18552
http://tigger.uic.edu/~jlongs2/holes/pcal.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/18552

Get alerted when CVE-2004-1289 or the next vulnerability affects your stack