Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-hb8p-k984-2bbb
Vulnerability ID VCID-hb8p-k984-2bbb
Aliases CVE-2012-3984
Summary Security researcher David Bloom of Cue discovered that <select> elements are always-on-top chromeless windows and that navigation away from a page with an active <select> menu does not remove this window.When another menu is opened programmatically on a new page, the original <select> menu can be retained and arbitrary HTML content within it rendered, allowing an attacker to cover arbitrary portions of the new page through absolute positioning/scrolling, leading to spoofing attacks. Security researcher Jordi Chancel found a variation that would allow for click-jacking attacks was well. In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts in those products.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.01951 https://api.first.org/data/v1/epss?cve=CVE-2012-3984
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2012-75
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3984.json
https://api.first.org/data/v1/epss?cve=CVE-2012-3984
863616 https://bugzilla.redhat.com/show_bug.cgi?id=863616
CVE-2012-3984 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3984
GLSA-201301-01 https://security.gentoo.org/glsa/201301-01
mfsa2012-75 https://www.mozilla.org/en-US/security/advisories/mfsa2012-75
USN-1600-1 https://usn.ubuntu.com/1600-1/
USN-1611-1 https://usn.ubuntu.com/1611-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.83758
EPSS Score 0.01951
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T08:27:26.267546+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2012/mfsa2012-75.md 38.6.0