Actually it turns out to exploit an vulnerability that was already fixed in both Firefox and Firefox ESR:

https://blog.mozilla.org/security/2013/08/04/investigating-s...

The fix was included in a Tor Browser Bundle update on June 26, 2013:

https://blog.torproject.org/blog/new-tor-browser-bundles-and...