Most recent entries from all

bdu:2019-03311

certfr-2018-avi-230 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Certaines d'entre elles permettent à un attaquant…

certfr-2018-avi-230

cnvd-2018-10243

EUVD-2026-62100

fkie_cve-2018-5158

The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file. This JavaScript can then be run with the permissions of the PDF viewer by its worker. This vulnerability affects Firefox ESR < 52.8 and Firefox < 60.

GHSA-7jg2-jgv3-fmr4 — Malicious PDF can inject JavaScript into PDF Viewer

Affected: npm: pdfjs-dist

gsd-2018-5158

openSUSE-SU-2024:10600-1 — MozillaFirefox-92.0-1.2 on GA media

MozillaFirefox-92.0-1.2 on GA media

RHSA-2018:1414 — Red Hat Security Advisory: firefox security update

Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 Mozilla: Use-after-free with SVG animations and clip paths Mozilla: Use-after-free with SVG animations and text paths Mozilla: Same-origin bypass of PDF Viewer to view protected PDF files Mozilla: Malicious PDF can inject JavaScript into PDF Viewer Mozilla: Integer overflow and out-of-bounds write in Skia Mozilla: Lightweight themes can be installed without user interaction Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension Mozilla: Backport critical security fixes in Skia

SUSE-SU-2018:1319-1 — Security update for MozillaFirefox

Security update for MozillaFirefox

UBUNTU-CVE-2018-5158

Affected: Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox