CVE-2004-1289: Pcal

High severity, CVSS 10.0. EPSS: 14.7% chance of exploitation in the next 30 days.

Multiple buffer overflows in (1) the getline function in pcalutil.c and (2) the get_holiday function in readfile.c for pcal 4.7.1 allow remote attackers to execute arbitrary code via a crafted calendar file.

Affected products

• Pcal Pcal: version 4.1.0 only; version 4.3.0 only; version 4.5.0 only; version 4.6.0 only; version 4.7.0 only; version 4.7.1 only

Published 2005-01-10. Last modified 2026-06-16.