Microsoft is working on a security update targeted for the April updates. Quality and testing are important as IE is a very complex product to patch. This security patch could be released sooner if needed.
IE CreateTextRange vulnerability - Status from Microsoft
http://blogs.technet.com/msrc/archive/2006/03/25/423116.aspx