CVE-2005-1677 Security feature bypass in n/a

High 7.5 Published 25 May 2005 Updated 7 Aug 2024

Remote attackers can bypass restrictions on COM objects in Groove Virtual Office, potentially compromising security controls.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Over the internet
Victim action needed: Not stated
Fix: None listed

What is CVE-2005-1677?

CVE-2005-1677 is a high-severity vulnerability in n/a, published on 25 May 2005. It can be exploited over the network.

Official description

Unknown vulnerability in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allows remote attackers to bypass restrictions on COM objects.

Which versions are affected by CVE-2005-1677?

It affects 2 products.

Products include Groove Groove Workspace, Groove Virtual Office.

How do I fix CVE-2005-1677?

No fix has been published for CVE-2005-1677 yet. Limit exposure of the affected software until one is available.

Is CVE-2005-1677 being exploited?

There is no known exploitation of CVE-2005-1677 in the wild and no public exploit code.

Sources

Also known as GHSA-5755-cxgh-x355.