{
  "cveId": "CVE-2019-11696",
  "url": "https://patchblox.com/security/cve/CVE-2019-11696",
  "summary": "CVE-2019-11696 is fixed in 4 products on 1 platform, first by firefox 67.0\u002Bbuild2-0ubuntu0.18.04.1, released May 20, 2019. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "firefox: Files with the .JNLP extension used for \u0022Java web start\u0022 applications are not treated as executable content for downl...",
  "description": "Files with the .JNLP extension used for \u0022Java web start\u0022 applications are not treated as executable content for download prompts even though they can be executed if Java is installed on the local system. This could allow users to mistakenly launch an executable binary locally. This vulnerability affects Firefox \u0026lt; 67.",
  "published": "2019-05-20T17:00:00Z",
  "severity": "Medium",
  "epss": 0.00839,
  "epssPercentile": 0.58056,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "67.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox 67.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-67.0-build2-0ubuntu0.18.04.1",
      "released": "2019-05-20T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-globalmenu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "67.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox-globalmenu 67.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-globalmenu-67.0-build2-0ubuntu0.18.04.1",
      "released": "2019-05-20T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "67.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox-mozsymbols 67.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-mozsymbols-67.0-build2-0ubuntu0.18.04.1",
      "released": "2019-05-20T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-testsuite",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "67.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox-testsuite 67.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-testsuite-67.0-build2-0ubuntu0.18.04.1",
      "released": "2019-05-20T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}