This is far from the first time we've heard a story like this: "Microsoft investigates years-old IE bug."
The gist: Firefox, Chrome, Safari, and Opera all had it, too. They have all patched it. Microsoft is "looking into it." And only after the security researcher who discovered the bug went public, after finding he was "unsuccessful in persuading the vendor to issue a fix."