CVE-2012-0458: Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1....

Security readout for executives and security teams

This old Mozilla flaw could let a malicious page turn a user action into privileged browser script execution. The user must be tricked into changing the home page with a crafted URL, so it is not a hands-off server compromise. Business risk is mainly legacy endpoints still running the affected Mozilla versions. Exposure is likely limited to legacy systems running the named 2012-era Mozilla products. Organizations with managed browsers, old VDI images, kiosks, or unsupported desktop builds should verify versions. Current supported Mozilla releases are not shown as affected in the provided bundle. Treat as high priority only where legacy Mozilla software remains in use. The vulnerability enables privileged browser-code execution, but it is old, user-assisted, and not listed as KEV in the provided evidence. The main decision is whether any unmanaged or unsupported endpoints still carry affected versions. Mitigation focus: Upgrade Firefox to 3.6.28 or later, or ESR 10.0.3 or later.; Upgrade Thunderbird to 3.1.20 or later, or ESR 10.0.3 or later.; Upgrade SeaMonkey to 2.8 or later..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.