- September 14, 2006
- Priit Laes, CanadianGuy, Girts Folkmanis, Catalin Patulea
- Firefox, SeaMonkey, Thunderbird
- Fixed in
- Firefox 18.104.22.168
- SeaMonkey 1.0.5
- Thunderbird 22.214.171.124
CanadianGuy, Girts Folkmanis and Catalin Patulea report that a regular expression that ends with a backslash inside an unterminated character set (e.g. "[\\") will cause the regular epression engine to read beyond the end of the buffer, possibly leading to a crash.