Adding a single character to a function in the previous Outlook patch rendered that fix useless, researchers say.