Lucene search

CVE-2018-5158

🗓️ 11 Jun 2018 21:15:29Reported by mozillaType

cve🔗 web.nvd.nist.gov👁 129 Views🌐 4 Media mentions

The PDF viewer doesn't sanitize PostScript calculator functions, allowing injection of malicious JavaScript

Reporter	Title	Published	Views	Family All 92
Patchstack	WordPress Algori PDF Viewer Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)	8 Nov 202400:00	–	patchstack
Prion	Code injection	11 Jun 201821:29	–	prion
NVD	CVE-2018-5158	11 Jun 201821:29	–	nvd
RedhatCVE	CVE-2018-5158	29 Jan 202016:02	–	redhatcve
UbuntuCve	CVE-2018-5158	10 May 201800:00	–	ubuntucve
Veracode	Code Injection	16 May 201902:25	–	veracode
Debian CVE	CVE-2018-5158	11 Jun 201821:29	–	debiancve
Github Security Blog	Malicious PDF can inject JavaScript into PDF Viewer	14 May 202201:22	–	github
Cvelist	CVE-2018-5158	11 Jun 201821:00	–	cvelist
Hacker One	Nextcloud: XSS in PDF Viewer	16 Mar 202002:01	–	hackerone

Nvd

Vulners

Node

debian debian_linuxMatch7.0

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

Node

redhat enterprise_linux_desktopMatch6.0

redhat enterprise_linux_desktopMatch7.0

redhat enterprise_linux_serverMatch6.0

redhat enterprise_linux_serverMatch7.0

redhat enterprise_linux_server_ausMatch7.6

redhat enterprise_linux_server_eusMatch7.5

redhat enterprise_linux_server_eusMatch7.6

redhat enterprise_linux_server_tusMatch7.6

redhat enterprise_linux_workstationMatch6.0

redhat enterprise_linux_workstationMatch7.0

Node

mozilla firefoxRange<60.0

mozilla firefox_esrRange<52.8.0

Node

canonical ubuntu_linuxMatch14.04lts

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch17.10

canonical ubuntu_linuxMatch18.04lts

[
  {
    "product": "Firefox ESR",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "52.8",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "60",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.gentoo.org/glsa/201810-01
mozilla	www.mozilla.org/security/advisories/mfsa2018-12/
securityfocus	www.securityfocus.com/bid/104136
access	www.access.redhat.com/errata/RHSA-2018:1414
lists	www.lists.debian.org/debian-lts-announce/2018/05/msg00007.html
mozilla	www.mozilla.org/security/advisories/mfsa2018-11/
access	www.access.redhat.com/errata/RHSA-2018:1415
debian	www.debian.org/security/2018/dsa-4199
securitytracker	www.securitytracker.com/id/1040896
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

11 Jun 2018 21:29Current

6.1Medium risk

Vulners AI Score6.1

CVSS26.8

CVSS38.8

EPSS0.015

CWE-94