Microsoft confirms zero-day bug in IE6, IE7 and IE8