Malicious PDF can inject JavaScript into PDF Viewer

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2018-5158 · ADVISORY
• mozilla/pdf.js#9659 · WEB
• mozilla/pdf.js commit 2dc4af5 · WEB
• access.redhat.com/errata/RHSA-2018:1414 · WEB
• access.redhat.com/errata/RHSA-2018:1415 · WEB
• bugzilla.mozilla.org/show_bug.cgi · WEB
• mozilla/pdf.js · PACKAGE
• lists.debian.org/debian-lts-announce/2018/05/msg00007.html · WEB
• security.gentoo.org/glsa/201810-01 · WEB
• usn.ubuntu.com/3645-1 · WEB
• debian.org/security/2018/dsa-4199 · WEB
• mozilla.org/security/advisories/mfsa2018-11 · WEB
• mozilla.org/security/advisories/mfsa2018-12

Lỗ hổng khác của firefox

• CVE-2026-106016NGHIÊM TRỌNG 9.8Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158.
• CVE-2026-96869TRUNG BÌNH 4.3Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, …
• CVE-2026-100832CAO 8.8Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4…
• CVE-2026-100831CAO 8.8Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunder…
• CVE-2026-100830CAO 8.1Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, a…