This was an upstream Firefox bug, so you should probably quit using Firefox if you're concerned about bugs like this.

(Using Tor does change who can attempt to attack you with such bugs -- and maybe who is motivated to.)