Failed to set spam for invitation emails in QQ mail contact list

Disclosure Status:

2012-05-16: The details have been notified to the vendor and are awaiting processing by the vendor.
: The vendor has ignored the vulnerability and made the details public to the public.

Brief description:

The contact group function may be abused.

Detailed description:

The contact group feature allows you to randomly invite e-mail addresses that are sent on behalf of the 10000@qq.com.
Knowing that it is spam can not be processed (the sender is a 10000@qq.com), ordinary users are easy to be fooled.
Proof of vulnerability:

Solution:

Invitation email for Google Group