CVE-2018-5158 log

Severity High
Remote Yes
Type Arbitrary code execution
A insufficient sanitization of Postscript calculator functions vulnerability has been found in the PDF viewer of Firefox < 60.0, allowing malicious JavaScript to be injected through a crafted PDF file. This JavaScript can then be run with the permissions of the PDF viewer by its worker.
Group Package Affected Fixed Severity Status Ticket
AVG-693 firefox 59.0.2-3 60.0-1 Critical Fixed
Date Advisory Group Package Severity Type
13 May 2018 ASA-201805-10 AVG-693 firefox Critical multiple issues