Stepping outside its normal Patch Tuesday cycle, Microsoft has rolled out an emergency fix to an Internet Explorer bug that was under active malware attack. All versions of IE 6 to 10 are affected.
http://www.theregister.co.uk/2013/09/17/redmond_slips_out_emergency_ie_fix/