A flaw in versions 6 and 7 of Internet Explorer that could let a hacker take control of your PC will be patched on Tuesday 8 December, Microsoft has said.
It was initially thought that the problem might be big enough for Microsoft to release a rare 'out-of-cycle' patch, but it will instead be part of the company's regular Patch Tuesday update bundle.
Exploit code for the vulnerability is circulating on the web and anyone using IE6 or IE7 is advised to turn off JavaScript until the patch is issued.
"We want to make customers aware that we will be addressing the vulnerability discussed in Security Advisory 977981 in the IE bulletin on Tuesday," Microsoft's Jerry Bryant said.
"We know that customers are concerned about this issue and we are also aware that Proof of Concept (PoC) code is available publicly," he continued.