[Armbrs]

The presence of other security holes doesn't invalidate the existence of this one.

[atesti]

I really don't consider this a security hole!

This does not increase privileges of the attacker: If the attacker can modify Firefox's profile directory it could also inject something into firefox or read the cookies directly.