Mozilla · Firefox · CVE-2012-3985
**Name of the Vulnerable Software and Affected Versions**
Mozilla Firefox versions prior to 16.0
Thunderbird versions prior to 16.0
SeaMonkey versions prior to 2.13
**Description**
The issue allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging initial-origin access after `document.domain` has been set, due to improper implementation of the HTML5 Same Origin Policy.
**Recommendations**
For Mozilla Firefox versions prior to 16.0, update to version 16.0 or later.
For Thunderbird versions prior to 16.0, update to version 16.0 or later.
For SeaMonkey versions prior to 2.13, update to version 2.13 or later.