This is basically just a video version of this:

http://blog.metasploit.com/2010/01/reproducing-aurora-ie-exp...

posted earlier as:

http://news.ycombinator.com/item?id=1055986

which already has some discussion. If you're interested in how the vulnerability actually works, there's a Haml reduction of what may be the core cause (a DOM object lifecycle bug) posted on that thread.

I'm also not sure it's been established that this code is what got the attackers into Google, although it appears to have gotten them Adobe.