VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 23, 2004· Updated Jun 16, 2026

CVE-2004-0867

CVE-2004-0867

Description

Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session. NOTE: it was later reported that 2.x is also affected.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

28
  • KDE/Konqueror18 versions
    cpe:2.3:a:kde:konqueror:2.1.1:*:*:*:*:*:*:*+ 17 more
    • cpe:2.3:a:kde:konqueror:2.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:konqueror:2.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:konqueror:2.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:konqueror:2.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:konqueror:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:konqueror:3.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:konqueror:3.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:konqueror:3.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:konqueror:3.0.5b:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:konqueror:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:konqueror:3.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:konqueror:3.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:konqueror:3.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:konqueror:3.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:konqueror:3.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:konqueror:3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:konqueror:3.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:konqueror:3.2.3:*:*:*:*:*:*:*
  • Microsoft/Ie2 versions
    cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*
  • Microsoft/Internet Explorer
    cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*
  • Mozilla Corporation/Firefox2 versions
    cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*
    • (no CPE)range: <=2
  • SUSE S.A./Linux5 versions
    cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*+ 4 more
    • cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.