Actually it turns out to exploit an vulnerability that was already fixed in both Firefox and Firefox ESR: https://blog.mozilla.org/security/2013/08/04/investig

Actually it turns out to exploit an vulnerability that was already fixed in both Firefox and Firefox ESR: https://blog.mozilla.org/security/2013/08/04/investigating-security-vulnerability-report/comment-page-1/#comment-111200 https://blog.mozilla.org/security/2013/08/04/investigating-s... The fix was included in a Tor Browser Bundle update on June 26, 2013: https://blog.torproject.org/blog/new-tor-browser-bundles-and-tor-02414-alpha-packages https://blog.torproject.org/blog/new-tor-browser-bundles-and...