This script is Copyright (C) 2008-2014 Tenable Network Security, Inc.
The remote Red Hat host is missing one or more security updates.
Updated poppler packages that fix a security issue are now available
for Red Hat Enterprise Linux 5.
This update has been rated as having important security impact by the
Red Hat Security Response Team.
Poppler is a PDF rendering library, used by applications such as
Kees Cook discovered a flaw in the way poppler displayed malformed
fonts embedded in PDF files. An attacker could create a malicious PDF
file that would cause applications that use poppler -- such as Evince
-- to crash, or, potentially, execute arbitrary code when opened.
Users are advised to upgrade to these updated packages, which contain
backported patches to resolve this issue.
See also :
Update the affected poppler, poppler-devel and / or poppler-utils
Risk factor :
Medium / CVSS Base Score : 6.8
Family: Red Hat Local Security Checks
Nessus Plugin ID: 32021 ()
CVE ID: CVE-2008-1693