Other flags may be vulnerable as well. Microsoft has a thing for unicode.