Microsoft vows to issue "out-of-band" patch for IE bug