Microsoft Internet Explorer 6.0 and earlier allows malicious website operators to cause a denial of service (client crash) via JavaScript that continually refreshes the window via self.location.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-1200