Microsoft is working on a patch for a new security flaw in Office 97, which could allow hackers to delete files or manipulate data.