VulnerabilityModified
CVE-2005-1677
Unknown vulnerability in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allows remote attackers to bypass restrictions on COM objects.
HIGH 7.5EPSS 3.62%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (3.62%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unknown vulnerability in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allows remote attackers to bypass restrictions on COM objects.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 3.62% probability · 89th percentile
- CISA KEV
- Not listed
- Affected
- groove/groove workspace · groove/virtual office
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/15421Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/155610Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/JGEI-6BCRCMThird Party Advisory, US Government Resource
- http://secunia.com/advisories/15421Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/155610Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/JGEI-6BCRCMThird Party Advisory, US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.