Unscored severity · published May 20, 2005
CVE-2005-1678
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded files in a compound document, which may allow remote attackers to trick users into executing malicious code.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GW
Groove Workspace · Groove
through 2.5n_build_1871 · source: NVD
VO
Virtual Office · Groove
through 3.1_build_2338; through 3.1a_build_2364 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1678
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1678
Patch
http://secunia.com/advisories/15421
Third Party Advisory
http://www.kb.cert.org/vuls/id/232232
Third Party Advisory
http://www.kb.cert.org/vuls/id/JGEI-6BCRD6
More from Groove Workspace
–
CVE-2005-1675
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 installs the client installation directories with insecure…
–
CVE-2005-1676
Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before…
–
CVE-2005-1677
Unknown vulnerability in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allows remote attackers to bypass…