VulnerabilityModified
CVE-2005-1678
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded files in a compound document, which may allow remote attackers to trick…
LOW 2.6EPSS 1.64%
Does this matter?
Lower severity and a low EPSS score (1.64%). Track it; it rarely justifies an emergency change on its own.
Description
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded files in a compound document, which may allow remote attackers to trick users into executing malicious code.
- CVSS 2.0
- 2.6 LOWAV:N/AC:H/Au:N/C:N/I:P/A:N
- EPSS
- 1.64% probability · 75th percentile
- CISA KEV
- Not listed
- Affected
- groove/groove workspace · groove/virtual office
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/15421Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/232232Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/JGEI-6BCRD6Third Party Advisory, US Government Resource
- http://secunia.com/advisories/15421Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/232232Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/JGEI-6BCRD6Third Party Advisory, US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.