PT-2018-2992 · Mozilla+5 · Firefox Esr+7

Wladimir Palant · Published 2018-05-09 · Updated 2024-12-12 · CVE-2018-5158

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 52.8 Firefox versions prior to 60 PDF.js versions prior to 2.0.550

Description The issue is related to errors in code generation management in the PDF Viewer component of Firefox ESR and Firefox browsers. It allows a remote attacker to execute arbitrary code using a specially crafted PDF file. The PDF viewer does not sufficiently sanitize PostScript calculator functions, enabling malicious JavaScript to be injected through a crafted PDF file. This JavaScript can then be run with the permissions of the PDF viewer by its worker.

Recommendations For Firefox ESR versions prior to 52.8, update to version 52.8 or later. For Firefox versions prior to 60, update to version 60 or later. For PDF.js versions prior to 2.0.550, update to version 2.0.550 or later.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

ALT-PU-2018-1787

ALT-PU-2018-1854

BDU:2019-03311

CESA-2018_1414

CESA-2018_1415

CVE-2018-5158

DLA-1376-1

DSA-4199-1

GHSA-7JG2-JGV3-FMR4

MGASA-2018-0248

MGASA-2018-0338

OPENSUSE-SU-2018_1212-1

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

RHSA-2018:1414

RHSA-2018:1415

RHSA-2018_1414

RHSA-2018_1415

SUSE-SU-2018:1319-1

SUSE-SU-2018:1334-1

SUSE-SU-2018:1334-2

SUSE-SU-2018:2298-1

SUSE-SU-2019:2872-1

USN-3645-1

USN-3645-2

Affected Products

Alt Linux

Centos

Firefox

Firefox Esr

Pdf.Js

Red Hat

Suse

Ubuntu

References · 1973

• https://osv.dev/vulnerability/SUSE-SU-2018:1334-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2018-11 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2018-07 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:1334-2 · Vendor Advisory
• https://mozilla.org/security/known-vulnerabilities/firefox-esr · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0338 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2872-1 · Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1452075 · Vendor Advisory
• https://security.gentoo.org/glsa/201810-01 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:1414 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-5182 · Vendor Advisory
• https://usn.ubuntu.com/3645-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-5157 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0248 · Vendor Advisory