What is CVE-2004-1289?

CVE-2004-1289 is a vulnerability in Pcal. Published 2005-01-10.

Is CVE-2004-1289 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Pcal

CVE-2004-1289

Multiple buffer overflows in (1) the getline function in pcalutil.c and (2) the get_holiday function in readfile.c for pcal 4.7.1 allow remote attackers to execute arbitrary code via a crafted calendar file.

EPSS: 0.147 (96.3th percentile) — read the EPSS interpretation.

Affected products

Pcal — versions 4.1.0, 4.3.0, 4.5.0
N/a — versions n/a

Public proof-of-concept exploits

mudongliang/LinuxFlaw
oneoy/cve-

References

cve@mitre.org (Exploit, x_refsource_MISC, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)

Frequently asked questions

What is CVE-2004-1289?: CVE-2004-1289 is a vulnerability in Pcal. Published 2005-01-10.
Is CVE-2004-1289 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.