A new zero-day flaw in an Internet Explorer component has been disclosed publicly, after being initially reported in October 2013.