<html>
<form>
<input type crash>
</form>
</html>
(Note that it gives a null-pointer exception in everything that uses SHLWAPI.DLL (IE, Frontpage, etc.).)
Opening the page with IE gives a Norton AntiVirus Notification popup:
Scan type: Realtime Protection Scan
Event: Virus Found!
Virus name: Trojan.CrashIE
[...]
Turning off NAV gives a blank page with no crash, so apparently that bug has been fixed in one of the post 2003 IE updates.
FWIW.
Cheers,
Scott.