Barely two weeks after shipping an Internet Explorer makeover to cover a wave of drive-by downloads, is scrambling to address the public disclosure of a new zero-day vulnerability that could be used in code execution attacks.

The Redmond, Wash. software maker confirmed it was investigating a warning posted on the Full-disclosure mailing list that the latest versions of IE causes various types of crashes when visiting Web pages with nested OBJECT tags.

Read more: Microsoft Rocked by New IE Zero-Day Flaw Warning