New! Vulnerability Priority Rating (VPR)
Tenable calculates a dynamic VPR for every vulnerability. VPR combines vulnerability information with threat intelligence and machine learning algorithms to predict which vulnerabilities are most likely to be exploited in attacks. Read more about what VPR is and how it's different from CVSS.
VPR Score: 6.7
SynopsisA package installed on the remote host is affected by a heap buffer overflow vulnerability.
DescriptionThe version of Poppler installed on the remote host is prior or equal to 0.76.1. It is, therefore, affected by a heap-based buffer overflow vulnerability due to a flaw in the JPEG handling code. An unauthenticated, remote attacker can exploit this, via a specially crafted file, to cause a denial of service condition or execution of arbitrary code.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
SolutionUpgrade to a patched version of Poppler once it is available.