Second zero-day Excel flaw emerges