eEye has confirmed that the Internet Explorer crash vulnerability as described in MS06-042 is indeed exploitable.