CVE-2006-4888
Microsoft Internet Explorer 6 and earlier allows remote attackers to cause a denial of service (application hang) via a CSS-formatted HTML INPUT element within a DIV element that has a larger size than the INPUT.
Date published : 2006-09-19
http://archives.neohapsis.com/archives/bugtraq/2006-07/0199.html
http://jonas.elunic.de/blog/index.php/2006/07/14/ie-freeze-bug/