Approved changes feed: RSS · Atom

cpe:2.3:a:trojita_project:trojita:0.7:*:*:*:*:*:*:*

part: a version: 0.7 update: *

VendorTrojita Project (aef2c3e2-1b50-513d-b77e-db3752d5108a)
ProductTrojita (2c8f15a7-531c-5f32-98a5-b819ced2ee67)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/loki13/trojita purl2cpe 2026-06-01 10:16:35.323949
pkg:deb/ubuntu/trojita purl2cpe 2026-06-01 10:16:35.323951
pkg:github/kde/trojita purl2cpe 2026-06-01 10:16:35.323952
pkg:githubm/jktjkt/trojita purl2cpe 2026-06-01 10:16:35.323953
pkg:rpm/fedora/trojita purl2cpe 2026-06-01 10:16:35.323955
pkg:rpm/opensuse/trojita purl2cpe 2026-06-01 10:16:35.323956
pkg:sourceforge/trojita purl2cpe 2026-06-01 10:16:35.323957

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-10734 vulnerable 2026-06-08 05:12:25.166447 Details available
In KDE Trojita 0.7, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted part(s) can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended receiver. If the receiver replies to this (benign looking) email, they unknowingly leak the plaintext of the encrypted message part(s) back to the attacker.
Published: 2019-04-07T14:34:33.000Z
Updated: 2024-08-04T22:32:01.148Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.