Crash confirmed to work on Windows 2000 machine with IE6 6.0.2800.1106 (I believe that would be IE6 SP1). Said Win2k box is fully patched.