Loading a XAML file that uses the insertObject mechanism while an empty iframe is present triggers a crash in IE8.

<!-- empty_iframe.html -->
<iframe width=400 height=400 src=""></iframe>

The XAML file (index.xaml) is loaded alongside this page in a specific nested frame arrangement. A working variation (Funca/) confirmed 100% reproducibility with the same basic structure. The crash was identified during XAML/WPF interop testing in IE8.

Found during my years at Microsoft (2006–2014). These bugs were patched long ago — shared here as a historical record for learning purposes.