Microsoft discloses another critical vulnerability, allowing trojan viruses to be planted at will.