CVE-2004-1289

Pcal - Buffer Overflow

Title source: rule
STIX 2.1

Description

Multiple buffer overflows in (1) the getline function in pcalutil.c and (2) the get_holiday function in readfile.c for pcal 4.7.1 allow remote attackers to execute arbitrary code via a crafted calendar file.

Exploits (2)

exploitdb WRITEUP VERIFIED
by Danny Lungstrom · textremotelinux
https://www.exploit-db.com/exploits/25036
exploitdb WRITEUP VERIFIED
by Danny Lungstrom · textremotelinux
https://www.exploit-db.com/exploits/25035

References (2)

Core 2
Core References
Exploit, Vendor Advisory x_refsource_misc
http://tigger.uic.edu/~jlongs2/holes/pcal.txt
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/18552

Scores

EPSS 0.1928
EPSS Percentile 95.4%

Details

Status published
Products (6)
pcal/pcal 4.1.0
pcal/pcal 4.3.0
pcal/pcal 4.5.0
pcal/pcal 4.6.0
pcal/pcal 4.7.0
pcal/pcal 4.7.1
Published Jan 10, 2005
Tracked Since Feb 18, 2026