CVE:CVE-2014-2567
CNNVD:CNNVD-201403-401
Trojita是Trojita团的一款基于Qt框架的IMAP电子邮件客户端，它支持随时随地访问邮件、应用于多种平台等。
Trojita 0.4及之前版本中的Imap/Tasks/OpenConnectionTask.cpp文件的‘OpenConnectionTask::handleStateHelper ’函数存在安全漏洞。当用户发送电子邮件时，攻击者可通过实施中间人攻击利用该漏洞使消息自动保存到‘发送’或‘草稿’文件夹，获取敏感信息。
solution:Upgrade trojita_project trojita to a higher version than 0.4,0.1,0.2,0.2.9,0.2.9.1,0.2.9.2,0.2.9.3,0.2.9.4,0.3,0.3.90,0.3.91,0.3.92,0.3.93,0.3.96,and avoid the version (,0.4],0.1,0.2,0.2.9,0.2.9.1,0.2.9.2,0.2.9.3,0.2.9.4,0.3,0.3.90,0.3.91,0.3.92,0.3.93,0.3.96