Unrated severityNVD Advisory· Published Jun 6, 2008· Updated Jun 16, 2026
CVE-2008-2575
CVE-2008-2575
Description
cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a (1) ZIP (aka .cbz) or (2) RAR (aka .cbr) archive filename.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
11- sourceforge.net/forum/forum.phpnvdBroken LinkPatch
- sourceforge.net/project/shownotes.phpnvdPatch
- cvs.fedoraproject.org/viewcvs/rpms/cbrpager/devel/cbrpager-0.9.16-filen-shell-escaping.patchnvdBroken LinkExploit
- secunia.com/advisories/30417nvdBroken LinkVendor Advisory
- secunia.com/advisories/30438nvdBroken LinkVendor Advisory
- security.gentoo.org/glsa/glsa-200806-05.xmlnvdThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/42741nvdThird Party AdvisoryVDB Entry
- secunia.com/advisories/30701nvdBroken Link
- www.jcoppens.com/soft/cbrpager/log.en.phpnvdRelease Notes
- www.vupen.com/english/advisories/2008/1693/referencesnvdBroken Link
News mentions
0No linked articles in our index yet.