The element below has an iframe created in it on window.load. Click on the document to have a string of HTML written to the iframe. IE8 will crash after writing the document.
This bug only happens in Browser Mode: IE8 and Document Mode: IE8 Standards.