At least according to the article in the TLP that started this post, IE handles the issue perfectly, prompting users about the security issue in running shell content, but allowing it if users choose to do so.
If you are trying to jokingly claim that IE itself is a bug, well, then fine, laugh away at your silly joke. Personally, I don't think that IE is particularly less safe (in spite of recent flaws) if you are surfing the net in a safe manner (i.e. firewalls, AV, anit-spyware, and using your brain to feret out safe vs. unsafe content). |