CVE-2004-1289

PCAL 4.x - Calendar File 'getline' Remote Buffer Overflow

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2004-1289 has a selected CVSS score of 10.0; EIP currently links 2 catalogued exploits.

Description

Multiple buffer overflows in (1) the getline function in pcalutil.c and (2) the get_holiday function in readfile.c for pcal 4.7.1 allow remote attackers to execute arbitrary code via a crafted calendar file.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
2

Proofs of concept

2

Catalogued exploits

ExploitDBPCAL 4.x - Calendar File 'getline' Remote Buffer OverflowExploitDB exploitby Danny LungstromNot analyzed1 file
ExploitDB
PoC details
ExploitDBPCAL 4.x - Calendar File 'get_holiday' Remote Buffer OverflowExploitDB exploitby Danny LungstromNot analyzed1 file
ExploitDB
PoC details

References

3