Microsoft confirms Windows security hole

Microsoft is working to patch a security hole in Windows 95 and Windows 98 that analysts say could lead to significant system damage.

The vulnerability can surface when users download Web pages embedded with malicious code that their computer is then forced to process, causing it to crash.

Analysts say the problem can also affect both Web-based and standard email programs, such as Microsoft's Outlook, which includes a feature that automatically opens, or previews, HTML Web pages without a user actually clicking on the link.

Although Microsoft called it "obscure," analysts say the vulnerability could affect millions of users.

A complete report is posted online at www.news.com.