I want to quickly follow-up on yesterdays blog post and provide some additional information about this. After digging into this from both Corel's and Microsoft's sides, it appears that the knowledge base article requires further clarification and will be updated shortly. To summarize the conclusion so far, the problem is not with CorelDRAW or the CorelDRAW .CDR file format, but appears to be related to the import filters from MS Office. Computerworld, eWeek and other publications had good coverage about this today.
As mentioned yesterday, Corel is currently not aware of any security issue related to CorelDRAW or the CorelDRAW .CDR file format (or any other product / file format from Corel for that matter). If there was a known problem that had security implications, we would get this resolved as quickly as possible.
Update (Jan 5, 2008): David LeBlanc posted additional information on his blog.
Update 2 (Jan 6, 2008): Everything is clarified - Computerworld posted another article about it yesterday, followed by BetaNews.
Yani, they actually only disabled their (very old) import filters... very few people actually use them anyway as they don't support current versions of CorelDRAW. OLE objects will still work fine with CorelDRAW.