First, IE is itself a hole.
Second, this is
not news. If a month went by without finding a critical flaw in IE,
that would be news. If they are smart, tech news writers have a macro, ctrl+e, which types out: "Microsoft Confirms 'Highly Critical' IE Hole."
Seriously, does a Microsoft meeting go something like this:
Programmer: "Hey, I got a great new feature we can add to [fill in the blank]."
Decision Maker: "Great, put it in."
New Guy: "We don't really know how it will interact with all the other code."
Decision Maker: "So...what's your point?"
New Guy: "Well...you know...security and stuff."
Decision Maker: "
Chicken pot, chicken pot, chicken pot pie!"