CVE:CVE-2007-4464
CNNVD:CNNVD-200708-359
Total Commander的Fileinfo 2.0.9插件中存在CRLF 注入漏洞。用户协助式的远程攻击者可以借助一个PE文件的IMAGE_EXPORT_DIRECTORY数组中具有CLRF序列的字符串,且该字符串可以使forensics调查变得复杂，以欺骗Image文件页眉标签上的信息。
solution:Upgrade fransois_gannier fileinfo_plugin to a higher version than 2.09,and avoid the version 2.09; Upgrade ghisler total_commander to a higher version than *