https://bugs.winehq.org/show_bug.cgi?id=38929
--- Comment #4 from Ken Sharp imwellcushtymelike@gmail.com --- I've tried using the native mshtml alone from the IE6 package but that's not enough to continue so something else is needed.
I tried native urlmon, ieframe, iertutil and jscript too but they didn't make much difference. The urlmon I got from Win XP and seems to cause a double-free corruption.
I can't narrow it down any further at the moment so "winetricks ie6" is still the best workaround. Winetricks claims the installation fails but it seems fine.
Note that winetricks also works around Bug 34061.