CVE-2004-0867: Kde Konqueror

High severity, CVSS 7.5. EPSS: 17.2% chance of exploitation in the next 30 days.

Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session. NOTE: it was later reported that 2.x is also affected.

Affected products

• Kde Konqueror: version 2.1.1 only; version 2.1.2 only; version 2.2.1 only; version 2.2.2 only; version 3.0 only; version 3.0.1 only; …
• Microsoft Ie: version 6.0 only
• Microsoft Internet Explorer: version 6.0 only
• Mozilla Firefox: version 0.9.2 only
• Suse Suse Linux: version 1.0 only; version 8 only; version 8.1 only; version 8.2 only; version 9.0 only

Published 2004-12-23. Last modified 2026-06-16.