description: The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file. This JavaScript can then be run with the permissions of the PDF viewer by its worker. This vulnerability affects Firefox ESR < 52.8 and Firefox < 60.
problem types: Malicious PDF can inject JavaScript into PDF Viewer
affected:
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 52.8, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 60, status: affected, version: unspecified, versionType: custom
}
