Microsoft fixes flaw in its own security software