CVE-2005-1678

Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded files in a compound document, which may allow remote attackers to trick users into executing malicious code.

Score

CVSS 2.0 2.6 Low

Status

Modified - cve@mitre.org

Published

2005-05-20

Last modified

2024-09-16

Affected products

• Groove Workspace (Groove)
• Virtual Office (Groove)

References

• http://secunia.com/advisories/15421
• http://www.kb.cert.org/vuls/id/232232
• http://www.kb.cert.org/vuls/id/JGEI-6BCRD6