Users of the web browser on both XP and Vista can be hit by a blended attack which installs malicious code, according to a security advisory released by the software giant