CVE-2012-3984

no score yetEPSS 2.2%

Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element's menu active, which allows remote attackers to spoof page content via vectors involving absolute positioning and scrolling.

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
Published: 2012-10-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

canonical:ubuntu_linux
mozilla:firefox
mozilla:seamonkey
mozilla:thunderbird
suse:linux_enterprise_desktop
suse:linux_enterprise_server

References

http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html
http://secunia.com/advisories/50856
http://secunia.com/advisories/50892
http://secunia.com/advisories/50904
http://secunia.com/advisories/50935

Check your stack JSON