CVEvulnerability
CVE-2005-1678
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2005-05-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
Description
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded files in a compound document, which may allow remote attackers to trick users into executing malicious code.
Affected configurations
• groove groove workspace (<= 2.5n build 1871)
• groove virtual office (<= 3.1 build 2338)
• groove virtual office (<= 3.1a build 2364)
Related
Referenced by CWE · observed example (1)
- CWE-451 User Interface (UI) Misrepresentation of Critical Information weakness
References
- http://secunia.com/advisories/15421 Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/232232 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/JGEI-6BCRD6 Third Party Advisory, US Government Resource
- http://secunia.com/advisories/15421 Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/232232 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/JGEI-6BCRD6 Third Party Advisory, US Government Resource