If it's not in your plugins in Firefox it should be ok, you can go here to test to see as well:
http://www.java.com/en/download/testjava.jsp
It sounds like Oracle was told about this exploit back in August, and released a patch in October but didn't patch it properly.
Overall there's been a lot of questions around Oracle and their stewardship of Java since they purchased Sun.