Cloudanix VulnDB

CVE-2004-1289

None

CVSS

—

EPSS

14.7%

Published

Jan 10, 2005

CISA due date

—

The record

Multiple buffer overflows in (1) the getline function in pcalutil.c and (2) the get_holiday function in readfile.c for pcal 4.7.1 allow remote attackers to execute arbitrary code via a crafted calendar file.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 pcal 0 4.8.0-1
Debian:12 pcal 0 4.8.0-1
Debian:13 pcal 0 4.8.0-1
Debian:3.0 pcal 0 4.7-8woody1