CVE-2017-11882: five years of exploitation

It means that some companies still have not installed MS Office patches that were published 5 years ago.