cve/2012/CVE-2012-3984.md

CVE-2012-3984

Description

Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element's menu active, which allows remote attackers to spoof page content via vectors involving absolute positioning and scrolling.

POC

Reference

• https://bugzilla.mozilla.org/show_bug.cgi?id=575294

Github

No PoCs found on GitHub currently.