← All CVEs

CVE-2004-1289

high · 10

Multiple buffer overflows in (1) the getline function in pcalutil.c and (2) the get_holiday function in readfile.c for pcal 4.7.1 allow remote attackers to execute arbitrary code via a crafted calendar file.

10
CVSS
14.7%
EPSS (exploit prob.)
97th
EPSS percentile
2005-01-10
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

VendorProductAffected versions
pcalpcal4.1.0
pcalpcal4.3.0
pcalpcal4.5.0
pcalpcal4.6.0
pcalpcal4.7.0
pcalpcal4.7.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2004-1289