CVE-2004-0867

CVE-2004-0867 describes a session fixation vulnerability in Mozilla Firefox versions 0.9.2 and later 2.x, affecting products like KDE, Microsoft, Mozilla, and SUSE. This flaw allows malicious websites to set cookies for country-specific top-level domains, enabling remote attackers to hijack a user's HTTP session. With a CVSS score of 7.5, this high-severity vulnerability is easily exploitable over the network with low complexity, potentially leading to unauthorized access to sensitive information. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.