CVE-2013-0967

No fix known EPSS 1%

CoreTypes in Apple Mac OS X before 10.8.3 includes JNLP files in the list of safe file types, which allows remote attackers to bypass a Java plug-in disabled setting, and trigger the launch of Java Web Start applications, via a crafted web site.

Published 2013-03-15 · CVE record · OSV

Products: apple mac_os_x, apple mac_os_x_server