The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file. This JavaScript can then be run with the permissions of the PDF viewer by its worker. This vulnerability affects Firefox ESR < 52.8 and Firefox < 60.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Algori Pdf Viewer Plugin | algori-pdf-viewer-plugin-cve-2018-5158 | May 15, 2025 | Nov 8, 2024 | |
| Alpine Linux | — | alpine-linux-upgrade-firefox-esr | May 23, 2018 | May 16, 2018 |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jun 11, 2018 | |
| Centos_linux | — | centos-upgrade-firefoxcentos-upgrade-firefox-debuginfo | May 22, 2018 | May 9, 2018 |
| Debian | debian-upgrade-firefox-esr | May 12, 2018 | May 9, 2018 | |
| Freebsd | freebsd-upgrade-package-firefoxfreebsd-upgrade-package-waterfoxfreebsd-upgrade-package-seamonkeyfreebsd-upgrade-package-linux-seamonkeyfreebsd-upgrade-package-firefox-esrfreebsd-upgrade-package-linux-firefoxfreebsd-upgrade-package-libxulfreebsd-upgrade-package-thunderbirdfreebsd-upgrade-package-linux-thunderbirdfreebsd-upgrade-package-gitlab-ce | May 10, 2018 | May 9, 2018 | |
| Gentoo Linux | gentoo-linux-upgrade-www-client-firefoxgentoo-linux-upgrade-www-client-firefox-bin | Oct 3, 2018 | Jun 11, 2018 | |
| Mfsa2018 11 | mozilla-firefox-upgrade-60_0 | May 10, 2018 | May 9, 2018 | |
| Mfsa2018 12 | mozilla-firefox-esr-upgrade-52_8 | May 10, 2018 | May 9, 2018 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-mail-thunderbird-52-8-0-0-175-3-33-0-4-0oracle-solaris-11-3-upgrade-mail-thunderbird-plugin-thunderbird-lightning-52-8-0-0-175-3-33-0-4-0oracle-solaris-11-3-upgrade-web-browser-firefox-52-8-0-0-175-3-33-0-4-0oracle-solaris-11-3-upgrade-web-browser-firefox-plugin-firefox-java-52-8-0-0-175-3-33-0-4-0oracle-solaris-11-3-upgrade-web-data-firefox-bookmarks-52-8-0-0-175-3-33-0-4-0 | Jun 18, 2018 | Jun 11, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-firefox | May 15, 2018 | May 9, 2018 |
| Redhat_linux | — | redhat-upgrade-firefoxredhat-upgrade-firefox-debuginfo | May 15, 2018 | May 9, 2018 |
| Suse | — | suse-upgrade-mozillafirefoxsuse-upgrade-mozillafirefox-develsuse-upgrade-mozillafirefox-translationssuse-upgrade-mozillafirefox-translations-commonsuse-upgrade-mozillafirefox-translations-other | May 12, 2018 | May 9, 2018 |
| Ubuntu | ubuntu-upgrade-firefox | May 22, 2018 | May 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub