What's frustrating about this is that Works often ships with lower-end computers, like those in use by students or as home computers. For the enterprise, this shouldn't be a huge threat -- even though there is no fix for it yet, just a warning from Microsoft on how to avoid it. The vulnerability is within an ActiveX control for the Works' Image Server, says McAfee analyst Kevin Beets.

A PC would need to visit a Web site engineered to exploit the flaw, and agree to download the ActiveX component. But we are all fairly well trained to ignore computer system warnings these days, so it's likely that users would accept the bad component.

Go to the Microsoft Subnet home page for more news, blogs, podcasts.

Click to read the article this is in response to.