CVE-2012-3984

published 2012-10-10

CVE-2012-3984: Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT…

medium 6.8 CVSS 3.1

AV N AC M Au N C P I P A P

Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element's menu active, which allows remote attackers to spoof page content via vectors involving absolute positioning and scrolling.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
mozilla	firefox	< 16.0	16.0
mozilla	seamonkey	< 2.13	2.13
mozilla	thunderbird	< 16.0	16.0
suse	linux_enterprise_desktop	—	—
suse	linux_enterprise_desktop	—	—
suse	linux_enterprise_server	—	—
suse	linux_enterprise_server	—	—