This link crashes my fully patched IE on

Crash-Windows 2k SP4 Workstation (6.0.2800.1106)
Crash-Windows XP SP1 64-bit (IE32-6.0.3790.1830)
Crash-Windows XP SP1 64-bit (IE64-6.0.3790.1830)

Poclink: http://www.kotaku.com/gaming/sex/girl-g ... 134028.php (http://www.kotaku.com/gaming/sex/girl-gives-xbox-360-controller-a-blowjob-134028.php)

Dunno if it?s a high risk since I don?t really care about IE security but this might interest some security researchers working on IE.

Windows XP Professional SP1 ENGLISH 64-bit (IE32-6.0.3790.1830) -crash-
Windows XP Professional SP1 ENGLISH 64-bit (IE64-6.0.3790.1830) -crash-
Windows XP Professional SP2 ENGLISH 32-bit (IE32-6.0.2900.2180) -nocrash- (nocrash on SP2 for me but some reported it crash)
Windows XP Professional SP1 ENGLISH 32-bit (IE32-6.0.2900.1106) -crash-
Windows 2k Workstation SP4 ENGLISH 32-bit (IE32-6.0.2800.1106) -crash-
Windows 2k Server SP4 ENGLISH 32-bit (IE32-6.0.2800.1106) -crash-
Windows NT4 Workstation SP6a ENGLISH 32-bit (IE32-6.0.2800.1106) -nocrash-
Windows NT4 Server SP6a ENGLISH 32-bit (IE32-6.0.2800.1106) -nocrash-
Windows 2k3 Server Std SP1 ENGLISH 32-bit (IE32-6.0.3790.1830) -crash- (silently exiting, no crash box...)

http://heapoverflow.com/bug2ksp4.bmp
http://heapoverflow.com/bugxpsp1.bmp

So in the case of the website go off or remove the webpage, attached is the saved page also crashing IE while loaded offline. cheers

Can you post a plain html without any AD junks?

havent it yet in logs with only html functions but I remember if you look at https://lists.grok.org.uk , in the archive , oct-nov 2005, you will catch some member's posts wich had reduce the bug in 5-10 lines of html (without the .css file), but for me then bug then was no more happening each time....

or you can grab

http://heapoverflow.com/IEcrash.htm
http://heapoverflow.com/IEcrash.rar

this last crash me each time on every IE.