[brendandahl]

Tech lead of pdf.js here: All of the above exploits were issues with extension code in firefox, i.e. other extensions could have these issues too. If you were to use the web only version of pdf.js none of these exploits would apply.

[ZoFreX]

Just to clarify... were the vulnerabilities in Firefox itself? Or were they in the extension?