Skip to content

CVE-2005-1678 Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded files in a compound d...

LowCVSS 2.6 EPSS 1.6%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded files in a compound document, which may allow remote attackers to trick users into executing malicious code.

Affected products

ProductAffected versionsFixed in
groove workspace <= 2.5n_build_1871 No fix listed
groove virtual office <= 3.1_build_2338 No fix listed
groove virtual office <= 3.1a_build_2364 No fix listed

References

  • 15421 patch third-party-advisory vendor-advisory
  • VU#232232 third-party-advisory us-government-resource
  • www.kb.cert.org third-party-advisory us-government-resource