Every CVE Search/ Get API key

CVE-2012-3979

Mozilla Firefox before 15.0 on Android does not properly implement unspecified callers of the...

6.8 Medium

CVE-2012-3979 is a medium vulnerability (CVSS 6.8) in Google Android, published August 29, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.88%, the 79th percentile. No source names a fixed version.

Mozilla Firefox before 15.0 on Android does not properly implement unspecified callers of the __android_log_print function, which allows remote attackers to execute arbitrary code via a crafted web page that calls the JavaScript dump function.

Exploit likelihood

1.88%Down 3.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

Mozilla Firefox before 15.0 on Android does not properly implement unspecified callers of the __android_log_print function, which allows remote attackers to execute arbitrary code via a crafted web page that calls the JavaScript dump function.

Record
CVE-2012-3979
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Mozilla Firefox before 15.0 on Android does not properly implement unspecified callers of the __android_log_print function, which allows remote attackers to execute arbitrary code via a crafted web page that calls the JavaScript dump function.

Record
CVE-2012-3979
Updated
2026-11-02
EUVDEUVD-2012-3923 No score

Mozilla Firefox before 15.0 on Android does not properly implement unspecified callers of the __android_log_print function, which allows remote attackers to execute arbitrary code via a crafted web page that calls the JavaScript dump function.

Record
EUVD-2012-3923
Updated
2026-11-03
GitHub AdvisoriesGHSA-85fc-m2vq-4r26 No score

Mozilla Firefox before 15.0 on Android does not properly implement unspecified callers of the...

Mozilla Firefox before 15.0 on Android does not properly implement unspecified callers of the __android_log_print function, which allows remote attackers to execute arbitrary code via a crafted web page that calls the JavaScript dump function.

Record
GHSA-85fc-m2vq-4r26
Updated
2026-11-02

Affected products

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD

References

MoveEnter Open