CVE-2013-0967 in Apple Mac OS X
Summary
CoreTypes in Apple Mac OS X before 10.8.3 includes JNLP files in the list of safe file types, which allows remote attackers to bypass a Java plug-in disabled setting, and trigger the launch of Java Web Start applications, via a crafted web site.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
01/10/2013
Disclosure
03/15/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 8011 | Apple Mac OS X Java Web Start | Not defined | Official fix | CVE-2013-0967 |