“The company said it had known for several weeks about the
Office 2000 flaw, which could allow data, software or hardware
to be damaged via e-mail or commands sent from a malicious Web
site. But it said it had chosen not to disclose the problem until a
remedy was ready.”
“Microsoft security bulletins on the Office 97 flaw had
explicitly said that Office 2000 users were not
vulnerable.”
Complete story. (Free site registration required.)