Unrated severityNVD Advisory· Published Jul 23, 2019· Updated Aug 4, 2024
CVE-2019-11696
CVE-2019-11696
Description
Files with the .JNLP extension used for "Java web start" applications are not treated as executable content for download prompts even though they can be executed if Java is installed on the local system. This could allow users to mistakenly launch an executable binary locally. This vulnerability affects Firefox < 67.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4<67+ 1 more
- (no CPE)range: <67
- (no CPE)range: unspecified
- osv-coords2 versionspkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweed
< 128.5.1-1.1+ 1 more
- (no CPE)range: < 128.5.1-1.1
- (no CPE)range: < 92.0-1.2
Patches
Vulnerability mechanics
References
2- bugzilla.mozilla.org/show_bug.cgimitrex_refsource_MISC
- www.mozilla.org/security/advisories/mfsa2019-13/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.