The createTextRange() zero-day vulnerability has been patched in the latest round of security updates from Microsoft.
If you’re curious to see the exploit in action at one site, you can see this video here. In it, the AppWiz keylogger is installed.
Patrick Jordan
Senior Spyware Researcher