GCVE - cpe:2.3:a:groove:virtual_office:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:groove:virtual_office:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Groove (`d1ebed1c-2ce5-5514-8ee4-bc052b40dbf3`)
Product	Virtual Office (`4ed21048-8845-5552-aa19-e2f891343ae4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-6530`	vulnerable	2026-06-08 04:50:09.036460	Details available Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual Office, allows remote attackers to execute arbitrary code via a long argument to the AddFolder function. Published: 2007-12-27T22:00:00.000Z Updated: 2024-08-07T16:11:05.732Z Open on db.gcve.eu Reference links http://marc.info/?l=full-disclosure&m=119863639428564&w=2 http://www.vupen.com/english/advisories/2007/4310 http://secunia.com/advisories/28205 http://www.securitytracker.com/id?1019147 http://secunia.com/advisories/28145	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1678`	vulnerable	2026-06-08 04:48:27.183914	Details available Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded files in a compound document, which may allow remote attackers to trick users into executing malicious code. Published: 2005-05-25T04:00:00.000Z Updated: 2024-09-16T22:46:56.271Z Open on db.gcve.eu Reference links http://secunia.com/advisories/15421 http://www.kb.cert.org/vuls/id/232232 http://www.kb.cert.org/vuls/id/JGEI-6BCRD6	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1677`	vulnerable	2026-06-08 04:48:27.183625	Details available Unknown vulnerability in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allows remote attackers to bypass restrictions on COM objects. Published: 2005-05-25T04:00:00.000Z Updated: 2024-08-07T21:59:23.549Z Open on db.gcve.eu Reference links http://secunia.com/advisories/15421 http://www.kb.cert.org/vuls/id/155610 http://www.kb.cert.org/vuls/id/JGEI-6BCRCM	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1676`	vulnerable	2026-06-08 04:48:27.183303	Details available Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allow remote attackers to inject arbitrary web script or HTML via the (1) picture columns embedded within SharePoint lists or (2) drop-down menus in a SharePoint list. Published: 2005-05-25T04:00:00.000Z Updated: 2024-09-16T23:56:31.504Z Open on db.gcve.eu Reference links http://secunia.com/advisories/15421 http://www.kb.cert.org/vuls/id/514386 http://www.kb.cert.org/vuls/id/372618 http://www.kb.cert.org/vuls/id/JGEI-6BCRCC	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1675`	vulnerable	2026-06-08 04:48:27.182875	Details available Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 installs the client installation directories with insecure EVERYBODY permissions, which allows local users to gain sensitive information. Published: 2005-05-25T04:00:00.000Z Updated: 2024-09-17T02:57:01.494Z Open on db.gcve.eu Reference links http://secunia.com/advisories/15421 http://www.kb.cert.org/vuls/id/443370 http://www.kb.cert.org/vuls/id/JGEI-6BCRBX	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.