http://bugs.winehq.org/show_bug.cgi?id=21371
--- Comment #4 from A Wine user RandomAccountName@mail.com 2010-02-15 10:26:34 --- Still present in 1.1.38.
I did a little experimenting by using winetricks ie6, then removing the dll overrides one at a time and trying to reproduce this bug, in hopes of narrowing down where the problem lies. I found that the overrides required to make it function are mshtml and shdocvw. Take away either of those, and the bug returns.
(It's a bit buggy unless shlwapi also has an override set, but it does allow text entry, at least.)
Never mind the other broken things I mentioned before. I think that's a separate bug.