CVE-2012-3980: The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, an...

Security readout for executives and security teams

A crafted website could make vulnerable Mozilla products run attacker-supplied JavaScript with browser-level privileges, but the attack required user assistance. This matters mainly for legacy systems still running Firefox or Thunderbird releases from before the 2012 fixes. Exposure is most likely on obsolete desktops, kiosks, embedded workstations, or packaged Linux environments still running the named Mozilla versions. Modern supported Firefox and Thunderbird branches should not be assumed affected from this bundle. Treat this as a legacy exposure cleanup item with high impact if present. It should not outrank actively exploited current vulnerabilities unless vulnerable old Mozilla builds remain in business-critical or internet-facing user workflows. Mitigation focus: Update Firefox to 15.0 or later, or Firefox ESR to 10.0.7 or later.; Update Thunderbird to 15.0 or later, or Thunderbird ESR to 10.0.7 or later.; Apply relevant Red Hat, Ubuntu, or SUSE packages for distribution-managed installations..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.