CVE-2008-2575

cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via...

6.8 Medium

cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a (1) ZIP (aka .cbz) or (2) RAR (aka .cbr) archive filename.

Exploit likelihood

2.65%Up 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a (1) ZIP (aka .cbz) or (2) RAR (aka .cbr) archive filename.

Record: CVE-2008-2575
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-78
Updated: 2026-11-02

CVE List No score

cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a (1) ZIP (aka .cbz) or (2) RAR (aka .cbr) archive filename.

Record: CVE-2008-2575
Updated: 2026-11-02

EUVDEUVD-2008-2570 No score

cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a (1) ZIP (aka .cbz) or (2) RAR (aka .cbr) archive filename.

Record: EUVD-2008-2570
Updated: 2026-11-03

GitHub AdvisoriesGHSA-7w42-h9j5-82q5 No score

cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via...

cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a (1) ZIP (aka .cbz) or (2) RAR (aka .cbr) archive filename.

Record: GHSA-7w42-h9j5-82q5
Weakness: CWE-78, CWE-94
Updated: 2026-11-02

Affected products

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-2575 is a medium vulnerability (CVSS 6.8) in Jcoppens Cbrpager, published June 6, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.65%, the 85th percentile. No source names a fixed version.

References

Show 7 moreShow less