- September 14, 2006
- Priit Laes, CanadianGuy, Girts Folkmanis, Catalin Patulea
- Firefox, SeaMonkey, Thunderbird
- Fixed in
- Firefox 126.96.36.199
- SeaMonkey 1.0.5
- Thunderbird 188.8.131.52
CanadianGuy, Girts Folkmanis and Catalin Patulea report that a regular expression that ends with a backslash inside an unterminated character set (e.g. "[\\") will cause the regular epression engine to read beyond the end of the buffer, possibly leading to a crash.