CVE-2004-1289

CVE-2004-1289 describes multiple buffer overflow vulnerabilities in pcal version 4.7.1, specifically within the getline and get_holiday functions. These flaws allow remote attackers to execute arbitrary code by supplying a specially crafted calendar file. With a CVSS score of 10.0, this vulnerability is critical, indicating a network-based attack with low complexity, requiring no authentication, and leading to complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, exploit code for both buffer overflows is publicly available on ExploitDB, and the CVE has garnered significant community discussion, despite no reported active exploitation or media coverage.