Modernizing Authentication — What It Takes to Transform Secure Access
Date: 12/14/2017 @ 1 p.m. ET
Whitedust Security has publicly posted proof of concept exploit code as well as simple test link here to prove its assertion.
The bug that the exploit code triggers is not unknown to Mozilla. Since August, it has been listed on Bugzilla, Mozilla's bug tracking system.,
Bugzilla Bug 303433 was originally reported by Tom Ferris of security-protocols.com and has the title of ''Firefox 1.0.6 segfaults on this malformed .html page''.
The bug apparently affects the current version of Firefox 1.0.7 and below. The Beta 2 release of FireFox 1.5 has fixed the bug in question.