This fix is NOT meant to relieve the need to do the regular patch Tuesday stuff. This is an MS “fixit” for two Zero Day bugs affecting IE9 and 10 allowing remote code execution, and this WILL happen if you visit an infected website…usually through a phishing email.

The exploit involves JavaScript, a programming language used to create some interactive content on websites. Normally Internet Explorer should block JavaScript from carrying out commands on anything other than the website itself. Instead, Internet Explorer is in some cases allowing JavaScript code affect Windows itself, allowing hackers the opportunity to cause damage.

You can get the “fixit” tool here: http://support.microsoft.com/kb/2934088