Mozilla Firefox和Firefox ESR 安全漏洞

http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-201805-1085

Mozilla Firefox和Firefox ESR都是美国Mozilla基金会开发的浏览器产品。Firefox是一款开源Web浏览器；Firefox ESR是Firefox的一个延长支持版本。 Mozilla Firefox 60之前版本和Firefox ESR 52.8之前版本中存在安全漏洞，该漏洞源于PDF阅读器没有充分的过滤PostScript计算器函数。远程攻击者可借助特制的PDF文件利用该漏洞注入并执行JavaScript代码。

resource:
hyperlink:http://www.securityfocus.com/bid/104136
resource:
hyperlink:http://www.securitytracker.com/id/1040896
resource:
hyperlink:https://access.redhat.com/errata/RHSA-2018:1414
resource:
hyperlink:https://access.redhat.com/errata/RHSA-2018:1415
resource:
hyperlink:https://bugzilla.mozilla.org/show_bug.cgi?id=1452075
resource:
hyperlink:https://lists.debian.org/debian-lts-announce/2018/05/msg00007.html
resource:
hyperlink:https://usn.ubuntu.com/3645-1/
resource:
hyperlink:https://www.debian.org/security/2018/dsa-4199
resource:
hyperlink:https://www.mozilla.org/security/advisories/mfsa2018-11/
resource:
hyperlink:https://www.mozilla.org/security/advisories/mfsa2018-12/