CVE-2005-1678

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-20 · updated 2026-06-16

Description

Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded files in a compound document, which may allow remote attackers to trick users into executing malicious code.

Affected products

Groove Workspace: through 2.5n_build_1871
Groove Virtual Office: through 3.1_build_2338; through 3.1a_build_2364

References

http://secunia.com/advisories/15421
http://www.kb.cert.org/vuls/id/232232
http://www.kb.cert.org/vuls/id/JGEI-6BCRD6
http://secunia.com/advisories/15421
http://www.kb.cert.org/vuls/id/232232
http://www.kb.cert.org/vuls/id/JGEI-6BCRD6

Get alerted when CVE-2005-1678 or the next vulnerability affects your stack