CVE-2004-1289

Published: Jan 10, 2005Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Multiple buffer overflows in (1) the getline function in pcalutil.c and (2) the get_holiday function in readfile.c for pcal 4.7.1 allow remote attackers to execute arbitrary code via a crafted calendar file.

Affected (6)

Products: Pcal: Pcal

Pcal

1 product

Pcal

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Pcal Pcal	Version 4.1.0
Pcal Pcal	Version 4.3.0
Pcal Pcal	Version 4.5.0
Pcal Pcal	Version 4.6.0
Pcal Pcal	Version 4.7.0
Pcal Pcal	Version 4.7.1

References (4)

http://tigger.uic.edu/~jlongs2/holes/pcal.txt

Source: cve@mitre.org

ExploitVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/18552

Source: cve@mitre.org

http://tigger.uic.edu/~jlongs2/holes/pcal.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/18552

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.