Hotfix 41.0.2 is immediately available for Windows, Linux and Mac OS X
Mozilla has released an urgent security update for the latest (stable) version of Firefox, resolving a vulnerability that could allow a malicious website to access private data from other sources.
Firefox version 41.0.2 was released on October 15th and is available for computers running Microsoft Windows, GNU/Linux, and Mac OS X.
According to the Mozilla Foundation, installing Firefox 41.0.2 is necessary to fix a single, high-critical vulnerability in the browser's fetch() API (Application Programming Interface), in which an inability to implement the CORS (Cross-Origin Resource Sharing) specification was identified.
"Security researcher Abdulrahman Alqabandi reported that the CORS specification in the fetch() API was not properly implemented, allowing malicious websites to access private data from other origins. Mozilla developer Ben Kelly independently reported the same issue," the company's security advisory states.
Mozilla urges all users of Mozilla Firefox 41.0 and 41.0.1 to apply the 41.0.2 security update as soon as possible. To upgrade, users can either use the browser's built-in updater (for Windows and Mac OS X) or download the 32-bit and 64-bit executables, as well as the source code package of Mozilla Firefox 41.0.2 and proceed with the installation.
For more information about the vulnerability identified in Firefox (CVE – 2015 – 7184), you can refer to the advisory issued by Mozilla, via the following link: https://www.mozilla.org/en-US/security/advisories/mfsa2015-115/
