Microsoft admits new attack route for massive DLL flaw