CNET News.com: Microsoft backtracks, says flaw also in Office 2000Aug 20, 1999, 21:42 (1 Talkback[s])
(Other stories by Mike Ricciuti)
"Reversing its earlier stance, Microsoft has acknowledged that a security hole found in its Office 97 application suite also affects its newer Office 2000 package."
"The hole allows code contained in an Excel 97 worksheet, hidden in a Web page or sent via email, to plant viruses, delete data, or read files... At the time, Microsoft officials said that the hole did not affect Office 2000..."
"Today, a Microsoft representative said that the company's programmers have found a similar vulnerability in Office 2000. According to Microsoft, the Office 2000 flaw is slightly different, but is also tied to Jet and can also be exploited via Excel to perform malicious acts. ... Microsoft is expected today to release both a bulletin detailing the security flaw and a software patch."