Patch protection

The bug in the Internet Explorer browser was discovered by anti-spyware firm Sunbelt Software on 21 September. It found that hackers could exploit weaknesses in the way that Microsoft's browser handles vector graphics to hijack Windows PCs.

One site found by Sunbelt used this vulnerability to install huge amounts of spyware and adware on a PC even though the machine was patched with the latest updates.

Since the discovery, more websites have been discovered using the exploit to hijack PCs, install key-loggers or other unwanted programs.

On its security blog, Microsoft acknowledged the discovery of the browser bug and said it was monitoring the situation. So far, it said, there was no indication that attacks mounted via the bug were "dramatic and widespread".

However, it said, this situation could change and it would release the patch earlier than the scheduled date of 10 October if it was warranted.

"The primary driver here is quality and protecting customers, not adherence to the monthly schedule," read the blog.

Patches have already started to appear from security firms including one from the newly created Zeroday Emergency Response Team (Zert).

This loose coalition of security researchers aims to produce fixes for bugs for which there are no official patches.

However, Microsoft said it could not endorse the patch from Zert or any other security firm.