CVE:CVE-2004-0867
CNNVD:CNNVD-200412-117
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox 存在权限许可和访问控制问题漏洞，该漏洞源于它允许网站为特定国家/地区的顶级域设置 cookie，例如 .ltd.uk、.plc.uk 和 .sch.uk，这可能允许远程攻击者执行会话固定攻击和 劫持用户的 HTTP 会话。
solution:Upgrade kde konqueror to a higher version than 2.1.1,2.1.2,2.2.1,2.2.2,3.0,3.0.1,3.0.2,3.0.3,3.0.5,3.0.5b,3.1,3.1.1,3.1.2,3.1.3,3.1.4,3.1.5,3.2.1,3.2.3,and avoid the version 2.1.1,2.1.2,2.2.1,2.2.2,3.0,3.0.1,3.0.2,3.0.3,3.0.5,3.0.5b,3.1,3.1.1,3.1.2,3.1.3,3.1.4,3.1.5,3.2.1,3.2.3; Upgrade microsoft ie to a higher version than 6.0:sp1,6.0:sp2,and avoid the version 6.0:sp1,6.0:sp2; Upgrade microsoft internet_explorer to a higher version than 6.0,and avoid the version 6.0; Upgrade mozilla firefox to a higher version than 0.9.2,and avoid the version 0.9.2; Upgrade suse suse_linux to a higher version than 1.0,8,8.1,8.2,9.0,and avoid the version 1.0,8,8.1,8.2,9.0