CVE-2006-4566

CVE-2006-4566 describes a denial-of-service vulnerability affecting Mozilla Firefox, Thunderbird, and SeaMonkey versions prior to 1.5.0.7, 1.5.0.7, and 1.0.5 respectively. This flaw allows remote attackers to crash the application by providing a malformed JavaScript regular expression containing an unterminated character set ending with a backslash, leading to a buffer over-read. With a CVSS score of 5.0, this vulnerability is of medium severity, requiring no authentication and having a low attack complexity, but only resulting in a partial denial of service. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.