Microsoft Corp. dismissed an anti-virus company's claim that versions of Internet Explorer 3.0 and above possess another hole in security by calling the feature in question a "design thing, not a bug."