After my previous post, Slashdot reports a Bugtaq entry which details a test which crashes various browsers, although not IE (as easily).
I've downloaded and installed the CGI and given it a try with Firefox 1.0PR on Linux (Redhat FC1). Whilst the browser sometimes "hangs" downloading the page (it recovers by pressing "stop") I haven't yet managed to actually irrevocably break the it.
So it looks like a useful test, and seems to kill all kinds on Windows. However, not quite as IE-exonerating as the self-satisfied Bugtraq post might imply.
<--break-->