- September 14, 2006
- Priit Laes, CanadianGuy, Girts Folkmanis, Catalin Patulea
- Firefox, SeaMonkey, Thunderbird
- Fixed in
- Firefox 22.214.171.124
- SeaMonkey 1.0.5
- Thunderbird 126.96.36.199
CanadianGuy, Girts Folkmanis and Catalin Patulea report that a regular expression that ends with a backslash inside an unterminated character set (e.g. "[\\") will cause the regular epression engine to read beyond the end of the buffer, possibly leading to a crash.