I saw this over on slashdot today. This seems to be a part of IE that must be used for testing purposes or something.
Try this HTML in any IE browser:
<html><form><input type crash></form></html>