CVE-2004-2476
Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (infinite loop and crash) via an IFRAME with "?" as the file source.
Date published : 2005-08-20
http://www.securityfocus.com/bid/10073
http://archives.neohapsis.com/archives/bugtraq/2004-04/0061.html