Attacks in the wild affect only IE versions 9 through 11 and rely on Flash. “Heap feng shui” strikes again.