<p>Microsoft released an emergency securityupdate that squashes a zero-day bug in Internet Explorer that is being targetedby attackers.</p><p>Early this week, the company released a FixIt tool to provide a temporary solution for users until a patch was ready. Thezero-day impacts Internet Explorer (IE) versions 6, 7, 8 and 9.</p><p>"Today we released Security UpdateMS12-063 to address limited attacks against a small number ofcomputers through a vulnerability in Internet Explorer versions 9 andearlier," blogged Yunsun Wee, director, Microsoft Trustworthy Computing."The majority of customers have automatic updates enabled and will notneed to take any action because protections will be downloaded and installedautomatically. For those manually updating, we encourage you to apply thisupdate as quickly as possible."</p><p>In addition to the zero-day, the update alsoaddresses four other privately disclosed security issues in IE. None of thosefour vulnerabilities are known to have been exploited in the wild, Microsoftsaid. All four are remote-code-execution vulnerabilities.</p><p><a href="http://www.eweek.com/c/a/Security/Microsoft-Patches-Internet-Explorer-ZeroDay-Flaw-in-Security-Update-810648/">Keep reading...</a></p>