CVE:CVE-2008-2575
CNNVD:CNNVD-200806-122
cbrPager 0.9.17之前的版本允许用户协助式攻击者借助(1)ZIP(又称.cbz)或(2)RAR(又称.cbr)存档文件文件名中的外壳元字符，执行任意指令。
solution:Upgrade jcoppens cbrpager to a higher version than 0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.8,0.9.9,0.9.10,0.9.11,0.9.12,0.9.13,0.9.14,0.9.15,0.9.16,and avoid the version 0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.8,0.9.9,0.9.10,0.9.11,0.9.12,0.9.13,0.9.14,0.9.15,0.9.16