Unrated severityNVD Advisory· Published May 20, 2005· Updated Apr 16, 2026

CVE-2005-1678

Description

Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded files in a compound document, which may allow remote attackers to trick users into executing malicious code.

Affected products

Groove/Groove Workspace
cpe:2.3:a:groove:groove_workspace:*:*:*:*:*:*:*:*
Range: <=2.5n_build_1871
Groove/Virtual Office
cpe:2.3:a:groove:virtual_office:*:*:*:*:*:*:*:*
Range: <=3.1_build_2338

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/15421nvdPatchVendor Advisory
www.kb.cert.org/vuls/id/232232nvdThird Party AdvisoryUS Government Resource
www.kb.cert.org/vuls/id/JGEI-6BCRD6nvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000