CVE-2008-2575: Fedoraproject Fedora

Medium severity, CVSS 6.8. EPSS: 2.6% chance of exploitation in the next 30 days.

cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a (1) ZIP (aka .cbz) or (2) RAR (aka .cbr) archive filename.

Affected products

• Fedoraproject Fedora: version 7 only; version 8 only; version 9 only
• Jcoppens Cbrpager: before 0.9.17 (fixed in 0.9.17)

Published 2008-06-06. Last modified 2026-06-16.