Sorry if this doesn't belong here. I discovered it while adding background-text on :hover to links in CSS, and it does require CSS elements to work.
When the link in the below code is hovered, IE6 crashes hard: "Visual C++ Runtime Library, Runtime Error, R6025 - pure virtual function call".
Changing just about any of the CSS parameters or removing any of the HTML elements in the page will either avoid the crash completely, or cause it to crash in a slightly more graceful way ("IE has encountered a problem and needs to close, please tell Microsoft about this problem.").
Note that if the HTML comment in the below code is removed, IE6 does not crash. Weird. Fragile!
Version tested: Win2K IE6.0.2800.1106, completely default config, WindowsUpdate says fully updated.
I don't have a WinXP system to test on. Anyone want to give it a shot?
It goes without saying that Mozilla/Firefox, Safari, and IE5/Mac work fine.
One redeeming factor about IE6: when you're simplifying test cases for a crash demo, it sure is nice to have 90% of the browser preloaded in the OS, so restarting after a crash only takes a couple seconds. :-)
Here's the code: