Search for vulnerabilities
| Vulnerability ID | VCID-3z88-wbqj-1ubv |
| Aliases |
CVE-2012-3987
|
| Summary | Security researcher Warren He reported that when a page is transitioned into Reader Mode in Firefox for Android, the resulting page has chrome privileges and its content is not thoroughly sanitized. A successful attack requires user enabling of reader mode for a malicious page, which could then perform an attack similar to cross-site scripting (XSS) to gain the privileges allowed to Firefox on an Android device. This has been fixed by changing the Reader Mode page into an unprivileged page. This vulnerability only affects Firefox for Android. |
| Status | Published |
| Exploitability | None |
| Weighted Severity | None |
| Risk | None |
| Affected and Fixed Packages | Package Details |
| System | Score | Found at |
|---|---|---|
| epss | 0.0023 | https://api.first.org/data/v1/epss?cve=CVE-2012-3987 |
| epss | 0.0023 | https://api.first.org/data/v1/epss?cve=CVE-2012-3987 |
| epss | 0.0023 | https://api.first.org/data/v1/epss?cve=CVE-2012-3987 |
| epss | 0.0023 | https://api.first.org/data/v1/epss?cve=CVE-2012-3987 |
| epss | 0.0023 | https://api.first.org/data/v1/epss?cve=CVE-2012-3987 |
| epss | 0.0023 | https://api.first.org/data/v1/epss?cve=CVE-2012-3987 |
| epss | 0.0023 | https://api.first.org/data/v1/epss?cve=CVE-2012-3987 |
| epss | 0.0023 | https://api.first.org/data/v1/epss?cve=CVE-2012-3987 |
| epss | 0.0023 | https://api.first.org/data/v1/epss?cve=CVE-2012-3987 |
| epss | 0.0023 | https://api.first.org/data/v1/epss?cve=CVE-2012-3987 |
| cvssv2 | 4.0 | https://nvd.nist.gov/vuln/detail/CVE-2012-3987 |
| generic_textual | critical | https://www.mozilla.org/en-US/security/advisories/mfsa2012-78 |
| Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
| Percentile | 0.45754 |
| EPSS Score | 0.0023 |
| Published At | April 1, 2026, 12:55 p.m. |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| 2026-04-01T13:17:55.468156+00:00 | Mozilla Importer | Import | https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2012/mfsa2012-78.md | 38.0.0 |