Internet Explorer createTextRange() Code Execution Variant 6