Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-5158

The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file. This JavaScript can then be run with the permissions of the PDF viewer by its worker. This vulnerability affects Firefox ESR < 52.8 and Firefox < 60.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.555
EPSS Ranking 97.9%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.8
References
Products affected by CVE-2018-5158


Contact Us

Shodan ® - All rights reserved