CVE-2002-1714

Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service crash via an object of type "text/html" with the DATA field that identifies the HTML document that contains the object, which may cause infinite recursion...