New Vulnerability: Microsoft Internet Explorer “createTextRange()” CodeExecution

A new vulnerability in Microsoft Internet Explorer has been
found by Secunia Research which can allow code execution.

Here is a snippet from Secunia Research.

[snip]

The vulnerability is caused due to an error in the processing of
the “createTextRange()” method call applied on a radio button
control. This can be exploited by e.g. a malicious web site to
corrupt memory in a way, which allows the program flow to be
redirected to the heap.

Successful exploitation allows execution of arbitrary code.

[snip]

We are still searching for the PoC for this and will update you
with more information. In the meantime please do not visit
untrusted web sites to avoid being exploited.