Microsoft promises fix for zero-day exploit that puts users of IE 9, and earlier IE versions, at risk upon visiting a malicious website.