http://bugs.winehq.org/show_bug.cgi?id=20459
--- Comment #8 from Vincent Povirk madewokherd@gmail.com 2010-06-05 12:36:59 --- Created an attachment (id=28585) --> (http://bugs.winehq.org/attachment.cgi?id=28585) hacky patch
It looks like get_client_disp_property is getting a NULL IDispatch from QueryInterface (but the call claims to succeed). Here's a hacky patch that might work around that.