CVE-2012-3984 — Mozilla Firefox vulnerability

9 documents6 sources
Severity
6.8MEDIUMNVD
EPSS
2.0%
top 16.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Mozilla FirefoxMozilla SeamonkeyMozilla Thunderbird+3 more
Timeline
PublishedOct 10
Latest updateMay 13

Description

Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element's menu active, which allows remote attackers to spoof page content via vectors involving absolute positioning and scrolling.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages5 packages

▶NVDmozilla/firefox< 16.0
▶NVDmozilla/seamonkey< 2.13

Also affects: Ubuntu Linux 10.04, 11.04, 11.10, 12.04

🔴Vulnerability Details

2
GHSA
GHSA-m3hq-4m6f-jcr6: Mozilla Firefox before 16↗2022-05-13
▶
CVEList
CVE-2012-3984: Mozilla Firefox before 16↗2012-10-10
▶

📋Vendor Advisories

4
Ubuntu
Thunderbird vulnerabilities↗2012-10-12
▶
Red Hat
Mozilla: Select element persistance allows for attacks (MFSA 2012-75)↗2012-10-09
▶
Ubuntu
Firefox vulnerabilities↗2012-10-09
▶
Red Hat
Mozilla: Select element persistance allows for attacks (MFSA 2012-75)↗2012-10-09
▶

💬Community

2
Bugzilla
CVE-2012-3984 CVE-2012-5354 Mozilla: Select element persistance allows for attacks (MFSA 2012-75)↗2012-10-06
▶
Bugzilla
(CVE-2012-3984) Firefox 10.0.1 : Navigation away from a page with multiple active <select> dropdown menu can be used for Spoofing And ClickJacking with XPI using window.open and geolocalisation↗2012-02-11
▶
CVE-2012-3984 — Mozilla Firefox vulnerability | cvebase