Lucene search

K
ubuntucveUbuntu.comUB:CVE-2018-5158
HistoryMay 10, 2018 - 12:00 a.m.

CVE-2018-5158

2018-05-1000:00:00
ubuntu.com
ubuntu.com
14

0.019 Low

EPSS

Percentile

88.7%

The PDF viewer does not sufficiently sanitize PostScript calculator
functions, allowing malicious JavaScript to be injected through a crafted
PDF file. This JavaScript can then be run with the permissions of the PDF
viewer by its worker. This vulnerability affects Firefox ESR < 52.8 and
Firefox < 60.

OSVersionArchitecturePackageVersionFilename
ubuntu17.10noarchfirefox< 60.0+build2-0ubuntu0.17.10.1UNKNOWN
ubuntu18.04noarchfirefox< 60.0+build2-0ubuntu1UNKNOWN
ubuntu14.04noarchfirefox< 60.0+build2-0ubuntu0.14.04.1UNKNOWN
ubuntu16.04noarchfirefox< 60.0+build2-0ubuntu0.16.04.1UNKNOWN